CVE-2024-51847

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in giovanebribeiro WP PagSeguro Payments wp-pagseguro-payments allows Stored XSS.This issue affects WP PagSeguro Payments: from n/a through = 1.0...

CVE-2024-49680

Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through = 8.5.5...

CVE-2024-52421

CVE-2024-52421 is a CSRF-enabled vulnerability in the WP Popup Window Maker WordPress plugin (

CVE-2024-51847

CVE-2024-51847: WP PagSeguro Payments for WordPress has a Stored XSS due to improper input neutralization during page generation in versions

CVE-2024-51856

CVE-2024-51856 is an XSS vulnerability in the WP Moose Elementor Kit (WordPress plugin) where improper input handling during web page generation leads to a DOM-based cross-site scripting issue. Public sources concur this affects Moose Elementor Kit up to version 1.0.0 (and earlier), with exploita...

CVE-2024-51903 WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brandon Hubbard WP Listings Pro wp-listings-pro allows Stored XSS.This issue affects WP Listings Pro: from n/a through = 3.0.14...

CVE-2024-51903 WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brandon Hubbard WP Listings Pro wp-listings-pro allows Stored XSS.This issue affects WP Listings Pro: from n/a through = 3.0.14...

CVE-2024-51903

CVE-2024-51903 is a Stored XSS in the WordPress plugin WP Listings Pro (affected: WP Listings Pro, versions

CVE-2024-51907

CVE-2024-51907: The WP Virtual Room Configurator plugin (codemenschen) has a Stored XSS in versions 1.0.0 and earlier due to improper input neutralization during page generation. Public sources corroborate a WordPress plugin vulnerability affecting WP Virtual Room Configurator up to 1.0.0 with re...

CVE-2024-51924

CVE-2024-51924 refers to a stored cross-site scripting (XSS) vulnerability in the WordPress WP Agenda plugin (affected: WP Agenda

CVE-2024-51924 WordPress WP Agenda plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexandremagno WP Agenda wp-agenda allows Stored XSS.This issue affects WP Agenda: from n/a through = 2.0...

CVE-2024-49680

CVE-2024-49680 : Missing authorization in the WordPress WP VR plugin allows exploitation of incorrectly configured access control. Affected: WP VR up to and including version 8.5.5 (per Patchstack, NVD/Red Hat, and related sources). Root cause: broken access control/security level misconfiguratio...

CVE-2024-49697

CVE-2024-49697 is a Broken Access Control / Missing Authorization vulnerability in WordPress Sunshine Photo Cart (versions

CVE-2024-51817

CVE-2024-51817 affects CodeZel Combo WP Rewrite Slugs (version

CVE-2024-51817 WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs combo-wp-rewrite-slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through = 1.0...

CVE-2024-51817 WordPress Combo WP Rewrite Slugs plugin <= 1.0 - Settings Change vulnerability

Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs combo-wp-rewrite-slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through = 1.0...

WordPress plugin WP VR 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-35056 · Wp Agenda · Wp Agenda

Name of the Vulnerable Software and Affected Versions: WP Agenda versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions n/a...

CVE-2024-51940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...

CVE-2024-51940

CVE-2024-51940 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin WP Responsive Video . The issue is due to improper neutralization of input during Web Page Generation, affecting plugin versions from n/a through 1.0. The connected documents confirm the plugin is vuln...