2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11715 | CRITICAL | 9.8 | 0.4% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11714 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11713 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11712 | MEDIUM | 5.3 | 0.4% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11711 | HIGH | 7.5 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11710 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-12501 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all ... |
| CVE-2024-12474 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2024-12459 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Ganohrs Toggle Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggle'... |
| CVE-2024-12422 | MEDIUM | 6.1 | 0.4% | Dec 14, 2024 | The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' paramet... |
| CVE-2024-11752 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Eveeno plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveeno' shortcode in all ... |
| CVE-2024-10690 | MEDIUM | 4.3 | 0.3% | Dec 14, 2024 | The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inclu... |
| CVE-2024-10646 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-9698 | HIGH | 7.2 | 1.7% | Dec 14, 2024 | The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2024-12578 | MEDIUM | 5.3 | 0.5% | Dec 14, 2024 | The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to... |
| CVE-2024-12555 | MEDIUM | 6.1 | 0.2% | Dec 14, 2024 | The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2024-12523 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'states_map' shortc... |
| CVE-2024-12517 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The WooCommerce Cart Count Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2024-12502 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-... |
| CVE-2024-12458 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Smart PopUp Blaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spb-button' ... |
| CVE-2024-12448 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p... |
| CVE-2024-12447 | MEDIUM | 4.3 | 0.3% | Dec 14, 2024 | The Get Post Content Shortcode plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up... |
| CVE-2024-12411 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Store... |
| CVE-2024-11894 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The The Permalinker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'permalink' short... |
| CVE-2024-11889 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now