VulnSocial

CVE-2024-11190Patch(jidaikobo / jwp-a11y)

LOWCVSS 4.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch jidaikobo jwp-a11y systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The jwp-a11y WordPress plugin through 4.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

jidaikobo CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • jwp-a11y

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
jidaikobo
Products
jwp-a11y

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-26: 1Patch / Workaround · 2026-05-26: 1Technical Details · 2026-05-26: 105-26
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2024-11190 - Stored XSS in Jwp-a11y WordPress plugin through 4.1.7. High privilege users can inject scripts even with unfiltered_html disabled. CVSS 0? No patch available. Review and restrict plugin use immediately. #CVE #WordPress #CVEAlerts

    Post summary

    The post identifies a stored XSS flaw in the Jwp-a11y WordPress plugin (CVE‑2024‑11190) with no patch available, urging immediate restriction of the plugin to mitigate risk.

    1000086
    904 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjidaikobojwp-a11y-wordpress-

Explore more

Back to dashboardjidaikobo CVEsjwp-a11y vulnerabilities