2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12446 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' s... |
| CVE-2024-11714 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11713 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11712 | MEDIUM | 5.3 | 0.4% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11710 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-12501 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all ... |
| CVE-2024-12474 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2024-12459 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Ganohrs Toggle Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggle'... |
| CVE-2024-12422 | MEDIUM | 6.1 | 0.4% | Dec 14, 2024 | The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' paramet... |
| CVE-2024-11752 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Eveeno plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveeno' shortcode in all ... |
| CVE-2024-10690 | MEDIUM | 4.3 | 0.3% | Dec 14, 2024 | The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inclu... |
| CVE-2024-10646 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-12578 | MEDIUM | 5.3 | 0.5% | Dec 14, 2024 | The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to... |
| CVE-2024-12555 | MEDIUM | 6.1 | 0.2% | Dec 14, 2024 | The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2024-12523 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'states_map' shortc... |
| CVE-2024-12517 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The WooCommerce Cart Count Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2024-12502 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-... |
| CVE-2024-12458 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Smart PopUp Blaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spb-button' ... |
| CVE-2024-12448 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p... |
| CVE-2024-12447 | MEDIUM | 4.3 | 0.3% | Dec 14, 2024 | The Get Post Content Shortcode plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up... |
| CVE-2024-12411 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Store... |
| CVE-2024-11894 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The The Permalinker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'permalink' short... |
| CVE-2024-11889 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-... |
| CVE-2024-11888 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The IDer Login for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ider_lo... |
| CVE-2024-11884 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Wp photo text slider 50 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp-photo... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now