2024 CVE Vulnerabilities
39,219 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11052 | MEDIUM | 6.1 | 0.3% | Dec 12, 2024 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site S... |
| CVE-2024-10637 | MEDIUM | 5.4 | 0.3% | Dec 12, 2024 | The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.54 does not validate and escape some of its bloc... |
| CVE-2024-10568 | MEDIUM | 4.7 | 0.4% | Dec 12, 2024 | The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allo... |
| CVE-2024-10518 | MEDIUM | 4.8 | 0.3% | Dec 12, 2024 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl... |
| CVE-2024-10517 | MEDIUM | 4.8 | 0.3% | Dec 12, 2024 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl... |
| CVE-2024-10010 | MEDIUM | 4.8 | 0.4% | Dec 12, 2024 | The LearnPress WordPress plugin before 4.2.7.2 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2024-12526 | MEDIUM | 4.3 | 0.2% | Dec 12, 2024 | The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in al... |
| CVE-2024-12463 | MEDIUM | 5.4 | 0.3% | Dec 12, 2024 | The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2024-12441 | MEDIUM | 6.1 | 0.4% | Dec 12, 2024 | The BP Email Assign Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parame... |
| CVE-2024-12406 | MEDIUM | 6.5 | 0.4% | Dec 12, 2024 | The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via t... |
| CVE-2024-12162 | MEDIUM | 6.1 | 0.4% | Dec 12, 2024 | The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via t... |
| CVE-2024-12156 | MEDIUM | 6.1 | 0.4% | Dec 12, 2024 | The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Sit... |
| CVE-2024-11891 | MEDIUM | 6.4 | 0.4% | Dec 12, 2024 | The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2024-11875 | MEDIUM | 6.4 | 0.3% | Dec 12, 2024 | The Add infos to the events calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2024-11804 | MEDIUM | 6.1 | 0.3% | Dec 12, 2024 | The Planaday API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all ver... |
| CVE-2024-11750 | MEDIUM | 6.4 | 0.3% | Dec 12, 2024 | The ONLYOFFICE DocSpace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'onlyoffice-d... |
| CVE-2024-11723 | MEDIUM | 6.1 | 0.3% | Dec 12, 2024 | The kvCORE IDX plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter on pages with the ... |
| CVE-2024-11709 | MEDIUM | 4.3 | 0.3% | Dec 12, 2024 | The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a miss... |
| CVE-2024-11459 | MEDIUM | 6.1 | 0.4% | Dec 12, 2024 | The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all v... |
| CVE-2024-11410 | MEDIUM | 6.4 | 0.3% | Dec 12, 2024 | The Top and footer bars for announcements, notifications, advertisements, promotions – YooBar plugin for WordPress is vu... |
| CVE-2024-11384 | MEDIUM | 5.4 | 0.2% | Dec 12, 2024 | The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2024-10182 | MEDIUM | 6.4 | 0.4% | Dec 12, 2024 | The Cognito Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versio... |
| CVE-2024-12461 | MEDIUM | 6.4 | 0.5% | Dec 12, 2024 | The WP-Revive Adserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprevive_asyn... |
| CVE-2024-12341 | MEDIUM | 4.3 | 0.3% | Dec 12, 2024 | The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing... |
| CVE-2024-12338 | MEDIUM | 6.1 | 0.4% | Dec 12, 2024 | The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolb... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now