2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-56249 | CRITICAL | 9.1 | 1.2% | Jan 2, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Uploa... |
| CVE-2024-56248 | MEDIUM | 4.9 | 0.5% | Jan 2, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You WPMasterToolK... |
| CVE-2024-56247 | HIGH | 7.2 | 0.5% | Jan 2, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post ... |
| CVE-2024-56246 | MEDIUM | 6.5 | 0.2% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Bl... |
| CVE-2024-56245 | MEDIUM | 6.5 | 0.2% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Blo... |
| CVE-2024-56244 | MEDIUM | 5.4 | 0.3% | Jan 2, 2025 | Missing Authorization vulnerability in WP Royal Ashe Extra ashe-extra allows Exploiting Incorrectly Configured Access Co... |
| CVE-2024-56243 | MEDIUM | 4.3 | 0.3% | Jan 2, 2025 | Missing Authorization vulnerability in JS Morisset WPSSO Core wpsso allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2024-56242 | MEDIUM | 5.4 | 0.2% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arc... |
| CVE-2024-56241 | MEDIUM | 6.5 | 0.2% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpkoithemes WPKoi ... |
| CVE-2024-56240 | MEDIUM | 6.5 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pronamic Pronamic ... |
| CVE-2024-56239 | MEDIUM | 6.5 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify ... |
| CVE-2024-56238 | MEDIUM | 5.3 | 0.5% | Jan 2, 2025 | Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Fun... |
| CVE-2024-56237 | MEDIUM | 4.8 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker /... |
| CVE-2024-56236 | MEDIUM | 4.3 | 0.3% | Jan 2, 2025 | Missing Authorization vulnerability in Juni Hestia Nginx Cache hestia-nginx-cache allows Exploiting Incorrectly Configur... |
| CVE-2024-56026 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg – SiteOrigin ... |
| CVE-2024-56025 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in adworkmedia AdWork... |
| CVE-2024-56024 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Custom Das... |
| CVE-2024-56023 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PerfectSolution WP... |
| CVE-2024-56022 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress Monsters... |
| CVE-2024-56018 | HIGH | 7.1 | 0.3% | Jan 2, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BU Web Team BU Sec... |
| CVE-2024-43927 | MEDIUM | 4.3 | 0.2% | Jan 2, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Till Krüss Email Address Encoder email-address-encoder allows Cross S... |
| CVE-2024-38790 | MEDIUM | 6.5 | 0.2% | Jan 2, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Smartsupp Smartsupp – live chat, chatbots, AI and lead generation sma... |
| CVE-2024-38789 | MEDIUM | 5.4 | 0.2% | Jan 2, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Re... |
| CVE-2024-38766 | MEDIUM | 4.3 | 0.2% | Jan 2, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in matomoteam Matomo Analytics matomo allows Cross Site Request Forgery.... |
| CVE-2024-38765 | MEDIUM | 4.3 | 0.2% | Jan 2, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in outtheboxthemes Oceanic oceanic allows Cross Site Request Forgery.Thi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now