Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-29 CVE-2024-43926 Cross-site Scripting vulnerability in Wpbeaverbuilder Beaver Builder
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Reflected XSS.This issue affects Beaver Builder: from n/a through 2.8.3.2.
network
low complexity
wpbeaverbuilder CWE-79
6.1
2024-08-29 CVE-2024-43934 Cross-site Scripting vulnerability in Robfelty Collapsing Archives
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5.
network
low complexity
robfelty CWE-79
5.4
2024-08-29 CVE-2024-43935 Cross-site Scripting vulnerability in Wpdelicious WP Delicious
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a through 1.6.7.
network
low complexity
wpdelicious CWE-79
5.4
2024-08-29 CVE-2024-43936 Cross-site Scripting vulnerability in Wpdeveloper Embedpress
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8.
network
low complexity
wpdeveloper CWE-79
5.4
2024-08-29 CVE-2024-43946 Cross-site Scripting vulnerability in Sktthemes SKT Blocks
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes SKT Blocks – Gutenberg based Page Builder allows Stored XSS.This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.5.
network
low complexity
sktthemes CWE-79
5.4
2024-08-29 CVE-2024-43948 Cross-site Scripting vulnerability in Dineshkarki WP Armour
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.
network
low complexity
dineshkarki CWE-79
6.1
2024-08-29 CVE-2024-43949 Cross-site Scripting vulnerability in Automattic Ghacitivity and Ghactivity
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic GHActivity allows Stored XSS.This issue affects GHActivity: from n/a through 2.0.0-alpha.
network
low complexity
automattic CWE-79
5.4
2024-08-29 CVE-2024-43950 Cross-site Scripting vulnerability in Nextbricks Bricksore
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nextbricks Brickscore allows Stored XSS.This issue affects Brickscore: from n/a through 1.4.2.5.
network
low complexity
nextbricks CWE-79
6.1
2024-08-29 CVE-2024-43951 Cross-site Scripting vulnerability in Cryoutcreations Tempera
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.
network
low complexity
cryoutcreations CWE-79
5.4
2024-08-29 CVE-2024-43952 Cross-site Scripting vulnerability in Cryoutcreations Esotera
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.
network
low complexity
cryoutcreations CWE-79
5.4