Vulnerabilities protected by our XSS: Cross Site Scripting firewall rule

26,558,464
Attacks Blocked in Past 24 Hours

Showing 81-100 of 6,018 Vulnerabilities

BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description
6.4
CVE-2024-1692
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-31122
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
6.4
CVE-2024-0367
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Yoo Slider <= 2.1.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-31106
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Prenotazioni <= 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-31102
Mar 29, 2024
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
6.4
CVE-2024-2144
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-30547
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting
6.1
CVE-2024-31112
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weekly Class Schedule <= 3.19 - Reflected Cross-Site Scripting
6.1
CVE-2024-31084
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
6.4
CVE-2024-2142
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-31091
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
6.4
CVE-2024-2141
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Post-Plugin Library <= 2.6.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-31085
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-31090
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-31123
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
OpenID <= 3.6.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-31107
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-30551
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-30561
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting
6.1
CVE-2024-31105
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
6.4
CVE-2024-2140
Mar 29, 2024
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description CVE-2024-1692 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting CVE-2024-31122 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link CVE-2024-0367 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Yoo Slider <= 2.1.1 - Reflected Cross-Site Scripting CVE-2024-31106 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Prenotazioni <= 1.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-31102 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget CVE-2024-2144 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Header Image Slider <= 0.3 - Reflected Cross-Site Scripting CVE-2024-30547 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Convert Post Types <= 1.4 - Reflected Cross-Site Scripting CVE-2024-31112 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Weekly Class Schedule <= 3.19 - Reflected Cross-Site Scripting CVE-2024-31084 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget CVE-2024-2142 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Custom Field Bulk Editor <= 1.9.1 - Reflected Cross-Site Scripting CVE-2024-31091 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget CVE-2024-2141 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Post-Plugin Library <= 2.6.2.1 - Reflected Cross-Site Scripting CVE-2024-31085 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Hacklog Down As PDF <= 2.3.6 - Reflected Cross-Site Scripting CVE-2024-31090 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
SpiderFAQ <= 1.3.2 - Reflected Cross-Site Scripting CVE-2024-31123 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
OpenID <= 3.6.1 - Reflected Cross-Site Scripting CVE-2024-31107 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Sticky Anything <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-30551 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N March 29, 2024
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting CVE-2024-30561 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Tax Rate Upload <= 2.4.5 - Reflected Cross-Site Scripting CVE-2024-31105 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N March 29, 2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget CVE-2024-2140 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 29, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation