What is the CVSS score of CVE-2024-13362?

CVE-2024-13362 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai CVE-2024-13362

EUVD-2024-55564 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-05-01 Wordfence

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor Tripetto Message Filter For Contact Form 7 Ocean Extra Oceanwp Mapster Wp Maps Premmerce Product Filter For Woocommerce Tickera Geo Mashup Restaurant Cafe Addon For Elementor Primary Addon For Elementor Events Addon For Elementor Wp Shortcodes Plugin Shortcodes Ultimate Display Eventbrite Events Share This Image Internal Link Juicer Custom Woocommerce Checkout Fields Editor Elespare Announcement Notification Banner Bulletin Carousel Recent Post Slider And Banner Slider Glossary Wordpress Plugin Wp Books Gallery Build Stunning Book Showcases Libraries In Minutes Menu Image Icons Made Easy Go Fetch Jobs For Wp Job Manager Dynamic Copyright Year Code Manager Advanced Scrollbar Custom Scrollbar Styling And Behavior Goal Tracker Custom Event Tracking For Ga4 Tablesome Table Contact Form Db Wpforms Cf7 Gravity Forminator Fluent Wp Page Templates Payment Gateway For Acba Bank Dracula Dark Mode Accessibility Reading Mode Dark Mode For Wordpress Forumax Ai Powered Advanced Community Forum Plugin Five Star Ratings Shortcode Product Layouts For Woocommerce Meta Field Block Display Custom Fields In The Block Editor Without Coding Open User Map Wp Notification Bell Remove Add To Cart Woocommerce File Manager For Google Drive Integrate Google Drive Marijuana Age Verify Revivepress Keep Your Old Content Evergreen Send Users Email Email Subscribers Email Marketing Newsletter Role Based Pricing For Woo By Meow Crew Featured Images In Rss For Mailchimp More Embedder For Google Reviews Mapgeo Interactive Geo Maps Widgets On Pages Spotlight Social Feeds Block Shortcode And Widget Wow Styler For Cf7 Visual Styler For Contact Form 7 Forms Ai Bud Ai Content Generator Ai Chatbot Chatgpt Gemini Gpt 4O Text To Speech Tts Accessibility Easy Age Verify Ai Puffer Chat Create Automate Formerly Ai Power Justified Gallery Streamweasels Twitch Integration Xt Variation Swatches For Woocommerce Bblocks Essential Gutenberg Blocks Patterns Collection Url Shortify Simple And Easy Url Shortener Kikote Location Picker At Checkout Google Address Autofill Plugin For Woocommerce Disable Payment Methods Based On Cart Conditions For Woocommerce Automatic Internal Links For Seo By Pagup Full Screen Background Master Addons For Elementor Widgets Extensions Theme Builder Popup Builder Template Kits Radio Player Live Shoutcast Icecast And Any Audio Stream Player Bulk Auto Image Alt Text Alt Tag Alt Attribute Optimizer Image Seo Xt Quick View For Woocommerce Smart Phone Field For Gravity Forms Notification Bar Announcement And Cookie Notice Wordpress Plugin Foobar Pdf Poster Display Pdf Files With Custom Viewer Html5 Audio Player The Ultimate No Code Podcast Mp3 Audio Player Restrict Membership Site Content And User Access Restrictions For Wordpress Custom Php Settings Wp Meta And Date Remover Anti Spam Protection No Api Key Gdpr Friendly Premmerce Permalink Manager For Woocommerce Music Player For Elementor Audio Player Podcast Player Topnewswp Display Tikcer News Rss Feed Widget And Many More Gallery By Foogallery Automatic Youtube Gallery Eazydocs Ai Powered Knowledge Base Wiki Documentation Faq Builder Team Members A Wordpress Team Plugin With Gallery Grid Carousel Slider Table List And More Radio Station By Netmix Manage And Play Your Show Schedule In Wordpress Storecustomizer A Plugin To Customize All Woocommerce Pages Joli Table Of Contents Ga4Wp Analytics Dashboard For The Website Place Order Without Payment For Woocommerce Better Messages Live Chat Chat Rooms Real Time Messaging Private Messages Inavii Social Feed Lightbox Modal Popup Wordpress Plugin Foobox Xt Floating Cart For Woocommerce Wp Mobile Menu The Mobile Friendly Responsive Menu Aeh Speed Optimization Independent Analytics Knowledge Base Documentation Wiki Plugin Basepress Docs Bulk Edit Posts And Products In Spreadsheet Post Smtp Complete Email Deliverability And Smtp Solution With Email Logs Alerts Backup Smtp Mobile App Tablepress Tables In Wordpress Made Easy Ultimeter Treepress Easy Family Trees Ancestor Profiles Pay For Post With Woocommerce Post To Google My Business Google Business Profile Wp Coupons And Deals Coupon Plugin For Affiliate Marketers Advanced Classifieds Directory Pro Mixed Media Gallery Blocks Blockspare News Magazine And Blog Addons For Gutenberg Block Editor Aidwp Donation Payment Forms Stripe Powered Logo Showcase Responsive Logo Carousel Logo Slider Logo Grid Post Slider And Post Carousel With Post Vertical Scrolling Widget A Responsive Post Slider Solid Testimonials Testimonial Slider Video Testimonials Customer Reviews Team Members Showcase Elespare News Magazine And Blog Addons For Elementor Post List Designer Category Post Recent Post Post List Blog Designer Pack Blog Post Grid Post Slider Post Carousel Category Post News Yasr Yet Another Star Rating Plugin For Wordpress Wpide File Manager Code Editor Wp Post Author Author Box Multiple Authors Guest Authors Custom Avatars Delete Posts Automatically Awca The Great Analytics Insights For Your Estore Thank You Page For Woocommerce Contact Form 7 Multi Step Forms Auto Install Free Ssl Generate Install Free Ssl Certificates Easy Appointment Booking Scheduling System Webba Booking Calendar Wp Fail2Ban Advanced Security Ivory Search Wordpress Search Plugin Wp Data Access App Builder For Tables Forms Charts Maps Dashboards Coupon Affiliates Affiliate Plugin For Woocommerce Security Ninja Wordpress Security Firewall Checkout With Cash App On Woocommerce Secure Gateway For Authorize Net And Woocommerce By Pledged Plugins Easy Social Feed Social Photos Gallery And Post Feed For Wordpress Wp Encryption One Click Free Ssl Certificate Ssl Https Redirect Security Ssl Scan Wordpress Form Builder Plugin For Contact Forms Surveys And Quizzes Tripetto Elementor Premmerce Blockspare Bplugins Infornweb Kaizencoders Fooplugins Saadiqbal Gallerycreator Afthemes Wpbits Wordplus Blackandwhitedigital Nicheaddons Spicethemes Kofimokome Mapster 5Starplugins Cyberhobo Prasadkirpekar Gn Themes Themelocation Oxilab Rebelcode Unitecms Davidanderson Cleverplugins 100Plugins Webfactory Streamweasels Xplodedthemes Plugins360 Bensibley

6.1

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-79 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Output encoding, context-aware escaping MITRE ATT&CK 2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	CVSS score of 6.1 (MEDIUM). Attack characteristics: network attack vector, low complexity, no privileges required, user interaction required. EPSS exploitation probability: 0.09%.
Exploit ScenarioDerived	A remote attacker could inject malicious scripts into web pages viewed by other users by sending crafted requests to the affected application. No authentication is required to exploit this vulnerability.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

Affected VersionsENISA

Featured Images in RSS for Mailchimp & More 0 ≤1.6.3

GA4WP – Analytics Dashboard for the Website 0 ≤2.6.0

Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce 0 ≤1.10.6

Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar 0 ≤2.1.34

Events Addon for Elementor 0 ≤2.2.2

XT Variation Swatches for WooCommerce 0 ≤1.9.4

Internal Link Juicer: SEO Auto Linker for WordPress 0 ≤2.24.6

Marijuana Age Verify 0 ≤1.5.5

Restrict – membership, site, content and user access restrictions for WordPress 0 ≤2.3.0

Goal Tracker – Custom Event Tracking for GA4 0 ≤1.1.5

Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI 0 ≤1.6.3

Widgets on Pages 0 ≤1.7

Payment Gateway for ACBA BANK 0 ≤1.2.6

Team Members Showcase 0 ≤3.3.0

Post List Designer – Category Post, Recent Post, Post List 0 ≤3.3.7

XT Floating Cart for WooCommerce 0 ≤2.8.4

Remove Add to Cart WooCommerce 0 ≤1.4.7

Forumax – AI Powered Advanced Community Forum Plugin 0 ≤1.2.7

BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor 0 ≤3.2.6

Five-Star Ratings Shortcode 0 ≤1.2.56

Display Eventbrite Events 0 ≤6.1.10

WPBITS Addons For Elementor Page Builder 0 ≤1.7

XT Quick View for WooCommerce 0 ≤2.1.5

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o 0 ≤1.7.2

WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan 0 ≤7.7.0

YASR – Yet Another Star Rating Plugin for WordPress 0 ≤3.4.12

Mixed Media Gallery Blocks 0 ≤3.2.4.4

Contact Form 7 Multi-Step Forms 0 ≤4.4.1

Music Player for Elementor – Audio Player & Podcast Player 0 ≤2.4.1

WPIDE – File Manager & Code Editor 0 ≤3.5.1

Automatic YouTube Gallery 0 ≤2.5.5

Custom WooCommerce Checkout Fields Editor 0 ≤1.3.4

PDF Poster – Display PDF Files with Custom Viewer 0 ≤2.2.0

MapGeo – Interactive Geo Maps 0 ≤1.6.22

Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins 0 ≤6.1.13

Message Filter for Contact Form 7 0 ≤1.6.3.2

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress 0 ≤6.6.5

Embedder for Google Reviews 0 ≤1.6.6

Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress 0 ≤1.2.7

Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player 0 ≤2.0.82

Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) 0 ≤2.1.0

Anti-Spam Protection – No API Key, GDPR Friendly 0 ≤2.3.7

Inavii Social Feed 0 ≤2.7.0

Unlimited Elements For Elementor 0 ≤1.5.140

WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards 0 ≤5.5.31

Code Manager 0 ≤1.0.40

HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 0 ≤2.2.27

EleSpare – News, Magazine and Blog Addons for Elementor 0 ≤3.3.2

Easy Age Verify 0 ≤1.8.5

WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars 0 ≤3.8.3

Glossary 0 ≤2.2.38

Auto-Install Free SSL – Generate & Install Free SSL Certificates 0 ≤4.5.0

Mapster WP Maps 0 ≤1.9.0

AidWP – Donation & Payment Forms (Stripe Powered) 0 ≤3.2.6

WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes 0 ≤4.6.8

Gallery by FooGallery 0 ≤2.4.27

Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages 0 ≤2.6.7

Knowledge Base documentation & wiki plugin – BasePress Docs 0 ≤2.16.3.3

WP Coupons and Deals – Coupon Plugin For Affiliate Marketers 0 ≤3.2.2

StoreCustomizer – A plugin to Customize all WooCommerce Pages 0 ≤2.5.9

TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More 0 ≤2.4.1

EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder 0 ≤2.5.7

Advanced Classifieds & Directory Pro 0 ≤3.2.4

AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization 0 ≤2.9.2

URL Shortify – Simple and Easy URL Shortener 0 ≤1.10.4

WP Notification Bell 0 ≤1.4.2

TablePress – Tables in WordPress made easy 0 ≤3.0.2

AI Puffer – Chat. Create. Automate. (formerly AI Power) 0 ≤1.8.99

Meta Field Block – Display custom fields in the Block Editor without coding 0 ≤1.3.3

Carousel, Recent Post Slider and Banner Slider 0 ≤2.1

Premmerce Product Filter for WooCommerce 0 ≤3.7.3

Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider 0 ≤3.2.7

AWCA – The Great Analytics Insights for Your eStore 0 ≤3.12.0

Dynamic Copyright Year 0 ≤1.0.4

Joli Table Of Contents 0 ≤2.6.0

Restaurant & Cafe Addon for Elementor 0 ≤1.5.8

Spotlight Social Feeds – Block, Shortcode, and Widget 0 ≤1.7.0

Lightbox & Modal Popup WordPress Plugin – FooBox 0 ≤2.7.33

Coupon Affiliates – Affiliate Plugin for WooCommerce 0 ≤5.17.2

Product Layouts for WooCommerce 0 ≤1.3.1

Send Users Email – Email Subscribers, Email Marketing Newsletter 0 ≤1.5.10

Role Based Pricing for Woo by Meow Crew 0 ≤1.6.0

Disable Payment Methods based on cart conditions for WooCommerce 0 ≤1.16.3

Pay For Post with WooCommerce 0 ≤3.1.26

Thank You Page for WooCommerce 0 ≤4.2.0

WP Meta and Date Remover 0 ≤2.3.4

Place Order Without Payment for WooCommerce 0 ≤2.6.5

Open User Map 0 ≤1.4.0

bBlocks – Essential Gutenberg Blocks & Patterns Collection 0 ≤1.9.8

Menu Image, Icons made easy 0 ≤3.12

Ultimeter 0 ≤3.0.5

Go Fetch Jobs (for WP Job Manager) 0 ≤1.8.4.8.1

Share This Image 0 ≤2.07

WP Shortcodes Plugin — Shortcodes Ultimate 0 ≤7.3.3

RevivePress – Keep your Old Content Evergreen 0 ≤1.5.8

Premmerce Permalink Manager for WooCommerce 0 ≤2.3.11

File Manager for Google Drive – Integrate Google Drive 0 ≤1.4.9

Checkout with Cash App on WooCommerce 0 ≤6.0.2

Geo Mashup 0 ≤1.13.15

Advanced Scrollbar – Custom Scrollbar Styling and Behavior 0 ≤1.1.3

Radio Station by netmix® – Manage and play your Show Schedule in WordPress! 0 ≤2.5.9

Full Screen Background 0 ≤2.0.2

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0 ≤1.1.13

Easy Appointment Booking & Scheduling System – Webba Booking Calendar 0 ≤5.0.57

Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews 0 ≤3.2.8

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits 0 ≤2.0.7.2

WP Page Templates 0 ≤1.1.16

Smart phone field for Gravity Forms 0 ≤2.1.6

Post to Google My Business (Google Business Profile) 0 ≤3.1.28

Text To Speech TTS Accessibility 0 ≤1.7.34

Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News 0 ≤3.4.9

WP fail2ban – Advanced Security 0 ≤5.3.4

Independent Analytics 0 ≤2.9.7

Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More 0 ≤2.5.8

Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid 0 ≤3.2.7

StreamWeasels Twitch Integration 0 ≤1.9.2

Ivory Search – WordPress Search Plugin 0 ≤5.5.8

WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto 0 ≤8.0.7

TreePress – Easy Family Trees & Ancestor Profiles 0 ≤3.0.6

Security Ninja – WordPress Security & Firewall 0 ≤5.222

Justified Gallery 0 ≤1.9.0

Ocean Extra 0 ≤2.4.2

Bulk Edit Posts and Products in Spreadsheet 0 ≤2.25.16

WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms 0 ≤1.7.0

Primary Addon for Elementor 0 ≤1.6.0

Automatic Internal Links for SEO by Pagup 0 ≤2.0.0

Announcement & Notification Banner – Bulletin 0 ≤3.12.1

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 0 ≤3.0.0

WP Mobile Menu – The Mobile-Friendly Responsive Menu 0 ≤2.8.6

Delete Posts automatically 0 ≤3.9.6

Custom PHP Settings 0 ≤2.3.1

Affected Packages

euvd advanced_classifieds_directory_pro no fix

euvd advanced_scrollbar_custom_scrollbar_styling_and_behavior no fix

euvd aeh_speed_optimization_browser_cache_optimized_minify_lazy_loading_image_optimization no fix

euvd ai_bud_ai_content_generator_ai_chatbot_chatgpt_gemini_gpt_4o no fix

euvd ai_puffer_chat_create_automate_formerly_ai_power no fix

euvd aidwp_donation_payment_forms_stripe_powered no fix

euvd announcement_notification_banner_bulletin no fix

euvd anti_spam_protection_no_api_key_gdpr_friendly no fix

euvd auto_install_free_ssl_generate_install_free_ssl_certificates no fix

euvd automatic_internal_links_for_seo_by_pagup no fix

euvd automatic_youtube_gallery no fix

euvd awca_the_great_analytics_insights_for_your_estore no fix

euvd bblocks_essential_gutenberg_blocks_patterns_collection no fix

euvd better_messages_live_chat_chat_rooms_real_time_messaging_private_messages no fix

euvd blockspare_news_magazine_and_blog_addons_for_gutenberg_block_editor no fix

euvd blog_designer_pack_blog_post_grid_post_slider_post_carousel_category_post_news no fix

euvd bulk_auto_image_alt_text_alt_tag_alt_attribute_optimizer_image_seo no fix

euvd bulk_edit_posts_and_products_in_spreadsheet no fix

euvd carousel_recent_post_slider_and_banner_slider no fix

euvd checkout_with_cash_app_on_woocommerce no fix

euvd code_manager no fix

euvd contact_form_7_multi_step_forms no fix

euvd coupon_affiliates_affiliate_plugin_for_woocommerce no fix

euvd custom_php_settings no fix

euvd custom_woocommerce_checkout_fields_editor no fix

euvd delete_posts_automatically no fix

euvd disable_payment_methods_based_on_cart_conditions_for_woocommerce no fix

euvd display_eventbrite_events no fix

euvd dracula_dark_mode_accessibility_reading_mode_dark_mode_for_wordpress no fix

euvd dynamic_copyright_year no fix

euvd easy_age_verify no fix

euvd easy_appointment_booking_scheduling_system_webba_booking_calendar no fix

euvd easy_social_feed_social_photos_gallery_and_post_feed_for_wordpress no fix

euvd eazydocs_ai_powered_knowledge_base_wiki_documentation_faq_builder no fix

euvd elespare_news_magazine_and_blog_addons_for_elementor no fix

euvd embedder_for_google_reviews no fix

euvd events_addon_for_elementor no fix

euvd featured_images_in_rss_for_mailchimp_more no fix

euvd file_manager_for_google_drive_integrate_google_drive no fix

euvd five_star_ratings_shortcode no fix

euvd forumax_ai_powered_advanced_community_forum_plugin no fix

euvd full_screen_background no fix

euvd ga4wp_analytics_dashboard_for_the_website no fix

euvd gallery_by_foogallery no fix

euvd geo_mashup no fix

euvd glossary no fix

euvd go_fetch_jobs_for_wp_job_manager no fix

euvd goal_tracker_custom_event_tracking_for_ga4 no fix

euvd html5_audio_player_the_ultimate_no_code_podcast_mp3_audio_player no fix

euvd image_alt_text_manager_bulk_dynamic_alt_tags_for_image_seo_optimization_ai no fix

euvd inavii_social_feed no fix

euvd independent_analytics no fix

euvd internal_link_juicer_seo_auto_linker_for_wordpress no fix

euvd ivory_search_wordpress_search_plugin no fix

euvd joli_table_of_contents no fix

euvd justified_gallery no fix

euvd kikote_location_picker_at_checkout_google_address_autofill_plugin_for_woocommerce no fix

euvd knowledge_base_documentation_wiki_plugin_basepress_docs no fix

euvd lightbox_modal_popup_wordpress_plugin_foobox no fix

euvd logo_showcase_responsive_logo_carousel_logo_slider_logo_grid no fix

euvd mapgeo_interactive_geo_maps no fix

euvd mapster_wp_maps no fix

euvd marijuana_age_verify no fix

euvd master_addons_for_elementor_widgets_extensions_theme_builder_popup_builder_template_kits no fix

euvd menu_image_icons_made_easy no fix

euvd message_filter_for_contact_form_7 no fix

euvd meta_field_block_display_custom_fields_in_the_block_editor_without_coding no fix

euvd mixed_media_gallery_blocks no fix

euvd music_player_for_elementor_audio_player_podcast_player no fix

euvd notification_bar_announcement_and_cookie_notice_wordpress_plugin_foobar no fix

euvd ocean_extra no fix

euvd open_user_map no fix

euvd pay_for_post_with_woocommerce no fix

euvd payment_gateway_for_acba_bank no fix

euvd pdf_poster_display_pdf_files_with_custom_viewer no fix

euvd place_order_without_payment_for_woocommerce no fix

euvd post_list_designer_category_post_recent_post_post_list no fix

euvd post_slider_and_post_carousel_with_post_vertical_scrolling_widget_a_responsive_post_slider no fix

euvd post_smtp_complete_email_deliverability_and_smtp_solution_with_email_logs_alerts_backup_smtp_mobile_app no fix

euvd post_to_google_my_business_google_business_profile no fix

euvd premmerce_permalink_manager_for_woocommerce no fix

euvd premmerce_product_filter_for_woocommerce no fix

euvd primary_addon_for_elementor no fix

euvd product_layouts_for_woocommerce no fix

euvd radio_player_live_shoutcast_icecast_and_any_audio_stream_player no fix

euvd radio_station_by_netmix_manage_and_play_your_show_schedule_in_wordpress no fix

euvd remove_add_to_cart_woocommerce no fix

euvd restaurant_cafe_addon_for_elementor no fix

euvd restrict_membership_site_content_and_user_access_restrictions_for_wordpress no fix

euvd revivepress_keep_your_old_content_evergreen no fix

euvd role_based_pricing_for_woo_by_meow_crew no fix

euvd secure_gateway_for_authorize_net_and_woocommerce_by_pledged_plugins no fix

euvd security_ninja_wordpress_security_firewall no fix

euvd send_users_email_email_subscribers_email_marketing_newsletter no fix

euvd share_this_image no fix

euvd smart_phone_field_for_gravity_forms no fix

euvd solid_testimonials_testimonial_slider_video_testimonials_customer_reviews no fix

euvd spotlight_social_feeds_block_shortcode_and_widget no fix

euvd storecustomizer_a_plugin_to_customize_all_woocommerce_pages no fix

euvd streamweasels_twitch_integration no fix

euvd tablepress_tables_in_wordpress_made_easy no fix

euvd tablesome_table_contact_form_db_wpforms_cf7_gravity_forminator_fluent no fix

euvd team_members_a_wordpress_team_plugin_with_gallery_grid_carousel_slider_table_list_and_more no fix

euvd team_members_showcase no fix

euvd text_to_speech_tts_accessibility no fix

euvd thank_you_page_for_woocommerce no fix

euvd topnewswp_display_tikcer_news_rss_feed_widget_and_many_more no fix

euvd treepress_easy_family_trees_ancestor_profiles no fix

euvd ultimeter no fix

euvd unlimited_elements_for_elementor no fix

euvd url_shortify_simple_and_easy_url_shortener no fix

euvd widgets_on_pages no fix

euvd wordpress_form_builder_plugin_for_contact_forms_surveys_and_quizzes_tripetto no fix

euvd wow_styler_for_cf7_visual_styler_for_contact_form_7_forms no fix

euvd wp_books_gallery_build_stunning_book_showcases_libraries_in_minutes no fix

euvd wp_coupons_and_deals_coupon_plugin_for_affiliate_marketers no fix

euvd wp_data_access_app_builder_for_tables_forms_charts_maps_dashboards no fix

euvd wp_encryption_one_click_free_ssl_certificate_ssl_https_redirect_security_ssl_scan no fix

euvd wp_fail2ban_advanced_security no fix

euvd wp_meta_and_date_remover no fix

euvd wp_mobile_menu_the_mobile_friendly_responsive_menu no fix

euvd wp_notification_bell no fix

euvd wp_page_templates no fix

euvd wp_post_author_author_box_multiple_authors_guest_authors_custom_avatars no fix

euvd wp_shortcodes_plugin_shortcodes_ultimate no fix

euvd wpbits_addons_for_elementor_page_builder no fix

euvd wpide_file_manager_code_editor no fix

euvd xt_floating_cart_for_woocommerce no fix

euvd xt_quick_view_for_woocommerce no fix

euvd xt_variation_swatches_for_woocommerce no fix

euvd yasr_yet_another_star_rating_plugin_for_wordpress no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 131 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Affected products include: Sebet Go Fetch Jobs (For Wp Job Manager), 5Starplugins Dynamic Copyright Year, Peterschulznl Code Manager, Bplugins Advanced Scrollbar – Custom Scrollbar Styling And Behavior, Yuvalo Goal Tracker – Custom Event Tracking For Ga4.

Know when Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

DescriptionCVE.org

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Threat Intelligence Overview

EPSS Score

0.1%

Top 75% exploitable

Social Media

Sightings

Data Quality

5 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS

Vulnrichment CIRCL

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.