What is the CVSS score of CVE-2024-13362?

CVE-2024-13362 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai CVE-2024-13362

EUVD-2024-55564 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-05-01 Wordfence

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor Tripetto Message Filter For Contact Form 7 Ocean Extra Oceanwp Mapster Wp Maps Premmerce Product Filter For Woocommerce Tickera Geo Mashup Restaurant Cafe Addon For Elementor Primary Addon For Elementor Events Addon For Elementor Wp Shortcodes Plugin Shortcodes Ultimate Display Eventbrite Events Share This Image Internal Link Juicer Custom Woocommerce Checkout Fields Editor Elespare Announcement Notification Banner Bulletin Carousel Recent Post Slider And Banner Slider Glossary Wordpress Plugin Wp Books Gallery Build Stunning Book Showcases Libraries In Minutes Menu Image Icons Made Easy Go Fetch Jobs For Wp Job Manager Dynamic Copyright Year Code Manager Advanced Scrollbar Custom Scrollbar Styling And Behavior Goal Tracker Custom Event Tracking For Ga4 Tablesome Table Contact Form Db Wpforms Cf7 Gravity Forminator Fluent Wp Page Templates Payment Gateway For Acba Bank Dracula Dark Mode Accessibility Reading Mode Dark Mode For Wordpress Forumax Ai Powered Advanced Community Forum Plugin Five Star Ratings Shortcode Product Layouts For Woocommerce Meta Field Block Display Custom Fields In The Block Editor Without Coding Open User Map Wp Notification Bell Remove Add To Cart Woocommerce File Manager For Google Drive Integrate Google Drive Marijuana Age Verify Revivepress Keep Your Old Content Evergreen Send Users Email Email Subscribers Email Marketing Newsletter Role Based Pricing For Woo By Meow Crew Featured Images In Rss For Mailchimp More Embedder For Google Reviews Mapgeo Interactive Geo Maps Widgets On Pages Spotlight Social Feeds Block Shortcode And Widget Wow Styler For Cf7 Visual Styler For Contact Form 7 Forms Ai Bud Ai Content Generator Ai Chatbot Chatgpt Gemini Gpt 4O Text To Speech Tts Accessibility Easy Age Verify Ai Puffer Chat Create Automate Formerly Ai Power Justified Gallery Streamweasels Twitch Integration Xt Variation Swatches For Woocommerce Bblocks Essential Gutenberg Blocks Patterns Collection Url Shortify Simple And Easy Url Shortener Kikote Location Picker At Checkout Google Address Autofill Plugin For Woocommerce Disable Payment Methods Based On Cart Conditions For Woocommerce Automatic Internal Links For Seo By Pagup Full Screen Background Master Addons For Elementor Widgets Extensions Theme Builder Popup Builder Template Kits Radio Player Live Shoutcast Icecast And Any Audio Stream Player Bulk Auto Image Alt Text Alt Tag Alt Attribute Optimizer Image Seo Xt Quick View For Woocommerce Smart Phone Field For Gravity Forms Notification Bar Announcement And Cookie Notice Wordpress Plugin Foobar Pdf Poster Display Pdf Files With Custom Viewer Html5 Audio Player The Ultimate No Code Podcast Mp3 Audio Player Restrict Membership Site Content And User Access Restrictions For Wordpress Custom Php Settings Wp Meta And Date Remover Anti Spam Protection No Api Key Gdpr Friendly Premmerce Permalink Manager For Woocommerce Music Player For Elementor Audio Player Podcast Player Topnewswp Display Tikcer News Rss Feed Widget And Many More Gallery By Foogallery Automatic Youtube Gallery Eazydocs Ai Powered Knowledge Base Wiki Documentation Faq Builder Team Members A Wordpress Team Plugin With Gallery Grid Carousel Slider Table List And More Radio Station By Netmix Manage And Play Your Show Schedule In Wordpress Storecustomizer A Plugin To Customize All Woocommerce Pages Joli Table Of Contents Ga4Wp Analytics Dashboard For The Website Place Order Without Payment For Woocommerce Better Messages Live Chat Chat Rooms Real Time Messaging Private Messages Inavii Social Feed Lightbox Modal Popup Wordpress Plugin Foobox Xt Floating Cart For Woocommerce Wp Mobile Menu The Mobile Friendly Responsive Menu Aeh Speed Optimization Independent Analytics Knowledge Base Documentation Wiki Plugin Basepress Docs Bulk Edit Posts And Products In Spreadsheet Post Smtp Complete Email Deliverability And Smtp Solution With Email Logs Alerts Backup Smtp Mobile App Tablepress Tables In Wordpress Made Easy Ultimeter Treepress Easy Family Trees Ancestor Profiles Pay For Post With Woocommerce Post To Google My Business Google Business Profile Wp Coupons And Deals Coupon Plugin For Affiliate Marketers Advanced Classifieds Directory Pro Mixed Media Gallery Blocks Blockspare News Magazine And Blog Addons For Gutenberg Block Editor Aidwp Donation Payment Forms Stripe Powered Logo Showcase Responsive Logo Carousel Logo Slider Logo Grid Post Slider And Post Carousel With Post Vertical Scrolling Widget A Responsive Post Slider Solid Testimonials Testimonial Slider Video Testimonials Customer Reviews Team Members Showcase Elespare News Magazine And Blog Addons For Elementor Post List Designer Category Post Recent Post Post List Blog Designer Pack Blog Post Grid Post Slider Post Carousel Category Post News Yasr Yet Another Star Rating Plugin For Wordpress Wpide File Manager Code Editor Wp Post Author Author Box Multiple Authors Guest Authors Custom Avatars Delete Posts Automatically Awca The Great Analytics Insights For Your Estore Thank You Page For Woocommerce Contact Form 7 Multi Step Forms Auto Install Free Ssl Generate Install Free Ssl Certificates Easy Appointment Booking Scheduling System Webba Booking Calendar Wp Fail2Ban Advanced Security Ivory Search Wordpress Search Plugin Wp Data Access App Builder For Tables Forms Charts Maps Dashboards Coupon Affiliates Affiliate Plugin For Woocommerce Security Ninja Wordpress Security Firewall Checkout With Cash App On Woocommerce Secure Gateway For Authorize Net And Woocommerce By Pledged Plugins Easy Social Feed Social Photos Gallery And Post Feed For Wordpress Wp Encryption One Click Free Ssl Certificate Ssl Https Redirect Security Ssl Scan Wordpress Form Builder Plugin For Contact Forms Surveys And Quizzes Tripetto Elementor Premmerce Blockspare Bplugins Infornweb Kaizencoders Fooplugins Saadiqbal Gallerycreator Afthemes Wpbits Wordplus Blackandwhitedigital Nicheaddons Spicethemes Kofimokome Mapster 5Starplugins Cyberhobo Prasadkirpekar Gn Themes Themelocation Oxilab Rebelcode Unitecms Davidanderson Cleverplugins 100Plugins Webfactory Streamweasels Xplodedthemes Plugins360 Bensibley

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

May 01, 2026 - 06:00 euvd

EUVD-2024-55564

CVE Published

May 01, 2026 - 05:29 nvd

MEDIUM 6.1

DescriptionCVE.org

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

AnalysisAI

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Affected products include: Sebet Go Fetch Jobs (For Wp Job Manager), 5Starplugins Dynamic Copyright Year, Peterschulznl Code Manager, Bplugins Advanced Scrollbar – Custom Scrollbar Styling And Behavior, Yuvalo Goal Tracker – Custom Event Tracking For Ga4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.