2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9206 | MEDIUM | 6.1 | 0.4% | Oct 18, 2024 | The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use... |
| CVE-2024-47793 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When acces... |
| CVE-2024-38820 | MEDIUM | 5.3 | 0.6% | Oct 18, 2024 | The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() ... |
| CVE-2024-9892 | MEDIUM | 4.8 | 0.3% | Oct 18, 2024 | The Add Widget After Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all... |
| CVE-2024-9848 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Product Customizer Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in a... |
| CVE-2024-9452 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Branding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up t... |
| CVE-2024-9383 | MEDIUM | 6.1 | 0.4% | Oct 18, 2024 | The Parcel Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all ve... |
| CVE-2024-9382 | MEDIUM | 6.1 | 0.3% | Oct 18, 2024 | The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'override_id' parame... |
| CVE-2024-9373 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Elemenda plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up t... |
| CVE-2024-9366 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Easy Menu Manager | WPZest plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in... |
| CVE-2024-9364 | MEDIUM | 4.3 | 0.4% | Oct 18, 2024 | The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability c... |
| CVE-2024-9361 | MEDIUM | 4.3 | 0.3% | Oct 18, 2024 | The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is vulnerable to unauthorize... |
| CVE-2024-9350 | MEDIUM | 6.1 | 0.4% | Oct 18, 2024 | The DPD Baltic Shipping plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search_value' para... |
| CVE-2024-8916 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Suki Sites Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all vers... |
| CVE-2024-8790 | MEDIUM | 6.1 | 0.3% | Oct 18, 2024 | The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use o... |
| CVE-2024-8740 | MEDIUM | 6.1 | 0.4% | Oct 18, 2024 | The GetResponse Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use o... |
| CVE-2024-10049 | MEDIUM | 6.1 | 0.3% | Oct 18, 2024 | The Edit WooCommerce Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ param... |
| CVE-2024-10040 | MEDIUM | 4.3 | 0.2% | Oct 18, 2024 | The Infinite-Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin... |
| CVE-2024-10014 | MEDIUM | 5.4 | 0.3% | Oct 18, 2024 | The Flat UI Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's flatbtn shortcode ... |
| CVE-2024-49023 | MEDIUM | 5.3 | 0.5% | Oct 18, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-43580 | MEDIUM | 5.4 | 0.4% | Oct 17, 2024 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2024-7316 | MEDIUM | 5.9 | 0.5% | Oct 17, 2024 | Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric CNC Series allows a remote unaut... |
| CVE-2024-27766 | MEDIUM | 5.7 | 1.2% | Oct 17, 2024 | An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE... |
| CVE-2024-49288 | MEDIUM | 4.8 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Email T... |
| CVE-2024-49282 | MEDIUM | 5.9 | 0.3% | Oct 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsiv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now