Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

34,556,325
Attacks Blocked in Past 24 Hours

Showing 61-80 of 6,225 Vulnerabilities

Pet Manager <= 1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-3917
May 2, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
6.4
CVE-2024-3490
May 1, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
LA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget
6.4
CVE-2024-3005
May 1, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
ElementsKit Elementor addons 3.0.7 - 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
6.4
CVE-2024-3650
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter
6.4
CVE-2024-4092
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
6.4
CVE-2024-0334
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Sailthru Triggermail <= 1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-4289
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Sailthru Triggermail <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4290
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-33940
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
WPify Woo Czech <= 4.0.10 - Reflected Cross-Site Scripting
6.1
CVE-2024-33946
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Unique <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-33952
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
RegistrationMagic <= 5.3.2.0 - Reflected Cross-Site Scripting
6.1
CVE-2024-33947
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Social Icons Widget & Block <= 4.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-2189
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Ultimate Under Construction <= 1.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-33943
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Carousel Slider <= 2.2.10 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2024-4372
Apr 30, 2024
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Archives Calendar Widget <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-33950
Apr 30, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-3368
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-3023
Apr 29, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.7 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates
6.4
CVE-2024-1679
Apr 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Admin Page Spider <= 3.31 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-2401
Apr 29, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
Pet Manager <= 1.4 - Reflected Cross-Site Scripting CVE-2024-3917 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N May 2, 2024
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode CVE-2024-3490 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 1, 2024
LA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author Widget CVE-2024-3005 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N May 1, 2024
ElementsKit Elementor addons 3.0.7 - 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget CVE-2024-3650 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter CVE-2024-4092 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes CVE-2024-0334 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Sailthru Triggermail <= 1.1 - Reflected Cross-Site Scripting CVE-2024-4289 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 30, 2024
Sailthru Triggermail <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-4290 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-33940 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
WPify Woo Czech <= 4.0.10 - Reflected Cross-Site Scripting CVE-2024-33946 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 30, 2024
Unique <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-33952 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 30, 2024
RegistrationMagic <= 5.3.2.0 - Reflected Cross-Site Scripting CVE-2024-33947 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 30, 2024
Social Icons Widget & Block <= 4.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-2189 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Ultimate Under Construction <= 1.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-33943 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Carousel Slider <= 2.2.10 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2024-4372 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
Archives Calendar Widget <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-33950 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 30, 2024
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3368 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 29, 2024
AnnounceKit <= 2.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-3023 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 29, 2024
Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce <= 3.4.7 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Templates CVE-2024-1679 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 29, 2024
Admin Page Spider <= 3.31 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-2401 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N April 29, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation