CVE-2024-49695

CVE-2024-49695 involves a Stored XSS in WP Flow Plus (WordPress) due to improper input neutralization during web page generation in versions up to 5.2.3. The vulnerability affects WP Flow Plus and can be mitigated by upgrading to version 5.2.4 or later, per Patchstack and related sources. The CVE...

CVE-2024-35651

CVE-2024-35651 concerns the WP Flow Plus WordPress plugin (Spiffy Plugins) withStored Cross-Site Scripting (XSS) vulnerability in versions