CVE-2024-11806 is a Reflected Cross-Site Scripting (XSS) vulnerability in the PKT1 Centro de envios WordPress plugin. This flaw allows unauthenticated attackers to inject malicious web scripts into websites using the vulnerable plugin. The vulnerability exists due to insufficient input sanitization in the 'success' and 'error' parameters. Although the CVSS score is 0, SOCRadar's Vulnerability Risk Score (SVRS) is 30, indicating a moderate risk that should still be addressed. Successful exploitation requires tricking a user into clicking a specially crafted link, leading to script execution in their browser. This can result in session hijacking, defacement, or redirection to malicious sites. Mitigating this vulnerability is essential to prevent potential website compromises. The presence of the "In The Wild" tag suggests that the vulnerability has been detected in real-world attacks, increasing the urgency to patch.