2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11265 | MEDIUM | 4.3 | 0.6% | Nov 23, 2024 | The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosu... |
| CVE-2024-11188 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for Word... |
| CVE-2024-11426 | MEDIUM | 6.4 | 0.4% | Nov 23, 2024 | The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2024-11408 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti' shortc... |
| CVE-2024-11387 | MEDIUM | 6.4 | 0.7% | Nov 23, 2024 | The Easy Liveblogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'elb_liveblog' sho... |
| CVE-2024-11361 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2024-11332 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents plugin for WordPress is vulnerable t... |
| CVE-2024-10880 | MEDIUM | 6.1 | 0.5% | Nov 23, 2024 | The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting... |
| CVE-2024-10606 | MEDIUM | 4.3 | 0.3% | Nov 23, 2024 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized m... |
| CVE-2024-9223 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on ... |
| CVE-2024-11463 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', ... |
| CVE-2024-11362 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is v... |
| CVE-2024-10886 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The Tribute Testimonials – WordPress Testimonial Grid/Slider plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2024-10874 | MEDIUM | 6.4 | 0.4% | Nov 23, 2024 | The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quotes-llama' short... |
| CVE-2024-10869 | MEDIUM | 6.1 | 0.5% | Nov 23, 2024 | The WordPress Brute Force Protection – Stop Brute Force Attacks plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-10868 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in... |
| CVE-2024-10537 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of dat... |
| CVE-2024-10216 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification ... |
| CVE-2024-10116 | MEDIUM | 5.4 | 0.4% | Nov 23, 2024 | The Twitter Follow Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'username' parameter... |
| CVE-2024-41761 | MEDIUM | 5.3 | 0.4% | Nov 23, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv... |
| CVE-2024-11586 | MEDIUM | 4 | 0.3% | Nov 23, 2024 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. |
| CVE-2024-8360 | MEDIUM | 6.8 | 0.9% | Nov 22, 2024 | Visteon Infotainment REFLASH_DDU_ExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability a... |
| CVE-2024-8359 | MEDIUM | 6.8 | 0.9% | Nov 22, 2024 | Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability. This vulnerability allo... |
| CVE-2024-8358 | MEDIUM | 6.8 | 0.9% | Nov 22, 2024 | Visteon Infotainment UPDATES_ExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability allow... |
| CVE-2024-8355 | MEDIUM | 6.8 | 0.6% | Nov 22, 2024 | Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now