2024 CVE Vulnerabilities
39,223 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9456 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The WP Awesome Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi... |
| CVE-2024-8870 | MEDIUM | 6.1 | 0.5% | Oct 26, 2024 | The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-9626 | MEDIUM | 4.3 | 0.3% | Oct 26, 2024 | The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missin... |
| CVE-2024-9613 | MEDIUM | 6.1 | 0.4% | Oct 26, 2024 | The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting ... |
| CVE-2024-9462 | MEDIUM | 4.8 | 0.3% | Oct 26, 2024 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2024-9454 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The PriPre plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to,... |
| CVE-2024-10091 | MEDIUM | 5.4 | 0.3% | Oct 26, 2024 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Compari... |
| CVE-2024-48239 | MEDIUM | 4.8 | 0.2% | Oct 25, 2024 | An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't pr... |
| CVE-2024-48238 | MEDIUM | 4.7 | 0.3% | Oct 25, 2024 | WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the paren... |
| CVE-2024-48236 | MEDIUM | 6.5 | 0.7% | Oct 25, 2024 | An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the writ... |
| CVE-2024-48235 | MEDIUM | 6.5 | 0.7% | Oct 25, 2024 | An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController... |
| CVE-2024-48234 | MEDIUM | 4.9 | 0.5% | Oct 25, 2024 | An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAd... |
| CVE-2024-48228 | MEDIUM | 6.1 | 0.3% | Oct 25, 2024 | An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the ... |
| CVE-2024-48396 | MEDIUM | 6.1 | 0.3% | Oct 25, 2024 | AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is exploited through the ... |
| CVE-2024-48233 | MEDIUM | 4.8 | 0.3% | Oct 25, 2024 | mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP param... |
| CVE-2024-48232 | MEDIUM | 4.9 | 0.5% | Oct 25, 2024 | An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the p... |
| CVE-2024-48227 | MEDIUM | 4.9 | 0.5% | Oct 25, 2024 | Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Servi... |
| CVE-2024-48225 | MEDIUM | 6.5 | 0.5% | Oct 25, 2024 | Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile. |
| CVE-2024-48224 | MEDIUM | 4.9 | 0.6% | Oct 25, 2024 | Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile. |
| CVE-2024-49766 | MEDIUM | 5.3 | 0.8% | Oct 25, 2024 | Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does no... |
| CVE-2024-48450 | MEDIUM | 6.5 | 0.5% | Oct 25, 2024 | An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploadin... |
| CVE-2024-37846 | MEDIUM | 4.6 | 0.3% | Oct 25, 2024 | MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Ma... |
| CVE-2024-37844 | MEDIUM | 5.4 | 0.2% | Oct 25, 2024 | A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scri... |
| CVE-2024-9585 | MEDIUM | 5.4 | 0.2% | Oct 25, 2024 | The Image Map Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'save_project' function with... |
| CVE-2024-9584 | MEDIUM | 5.4 | 0.3% | Oct 25, 2024 | The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a miss... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now