PatchTheCVE: cryoutcreationshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-11108: The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributeshttps://patchthecve.com/cve/CVE-2024-11108.htmlhttps://patchthecve.com/cve/CVE-2024-11108.htmlWed, 17 Jun 2026 06:57:04 +0000MEDIUM 5.4: The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.CVE-2024-43994: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-43994.htmlhttps://patchthecve.com/cve/CVE-2024-43994.htmlWed, 17 Jun 2026 07:52:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0.CVE-2024-43993: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-43993.htmlhttps://patchthecve.com/cve/CVE-2024-43993.htmlWed, 17 Jun 2026 07:52:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2.CVE-2024-45452: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-chttps://patchthecve.com/cve/CVE-2024-45452.htmlhttps://patchthecve.com/cve/CVE-2024-45452.htmlWed, 17 Jun 2026 07:54:14 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Septera septera allows Stored XSS.This issue affects Septera: from n/a through <= 1.5.1.CVE-2024-45451: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-chttps://patchthecve.com/cve/CVE-2024-45451.htmlhttps://patchthecve.com/cve/CVE-2024-45451.htmlWed, 17 Jun 2026 07:54:14 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through <= 1.3.0.CVE-2024-44050: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-chttps://patchthecve.com/cve/CVE-2024-44050.htmlhttps://patchthecve.com/cve/CVE-2024-44050.htmlWed, 17 Jun 2026 07:52:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Verbosa verbosa allows Stored XSS.This issue affects Verbosa: from n/a through <= 1.2.3.CVE-2024-44058: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-44058.htmlhttps://patchthecve.com/cve/CVE-2024-44058.htmlWed, 17 Jun 2026 07:52:14 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1.CVE-2024-44057: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-44057.htmlhttps://patchthecve.com/cve/CVE-2024-44057.htmlWed, 17 Jun 2026 07:52:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.CVE-2024-44056: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-44056.htmlhttps://patchthecve.com/cve/CVE-2024-44056.htmlWed, 17 Jun 2026 07:52:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2.CVE-2024-44054: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-44054.htmlhttps://patchthecve.com/cve/CVE-2024-44054.htmlWed, 17 Jun 2026 07:52:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8.CVE-2024-43952: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-43952.htmlhttps://patchthecve.com/cve/CVE-2024-43952.htmlWed, 17 Jun 2026 07:52:03 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.CVE-2024-43951: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-43951.htmlhttps://patchthecve.com/cve/CVE-2024-43951.htmlWed, 17 Jun 2026 07:52:02 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.CVE-2024-35762: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Chttps://patchthecve.com/cve/CVE-2024-35762.htmlhttps://patchthecve.com/cve/CVE-2024-35762.htmlWed, 17 Jun 2026 07:35:19 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.