2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-55970 | HIGH | 7.5 | 0.5% | Dec 15, 2024 | File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the ... |
| CVE-2024-31892 | HIGH | 7.5 | 0.3% | Dec 14, 2024 | IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 could allow a user to perform unauthorized act... |
| CVE-2024-31891 | HIGH | 7.8 | 0.2% | Dec 14, 2024 | IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulner... |
| CVE-2024-11721 | HIGH | 8.1 | 0.5% | Dec 14, 2024 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation in all versions up to, and i... |
| CVE-2024-11720 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via submission forms ... |
| CVE-2024-12628 | MEDIUM | 4.4 | 0.4% | Dec 14, 2024 | The bodi0`s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' paramete... |
| CVE-2024-12446 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' s... |
| CVE-2024-11715 | CRITICAL | 9.8 | 0.4% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11714 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11713 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11712 | MEDIUM | 5.3 | 0.4% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11711 | HIGH | 7.5 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-11710 | MEDIUM | 4.9 | 0.5% | Dec 14, 2024 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to... |
| CVE-2024-12501 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all ... |
| CVE-2024-12474 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2024-12459 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Ganohrs Toggle Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggle'... |
| CVE-2024-12422 | MEDIUM | 6.1 | 0.4% | Dec 14, 2024 | The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' paramet... |
| CVE-2024-11752 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Eveeno plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eveeno' shortcode in all ... |
| CVE-2024-10690 | MEDIUM | 4.3 | 0.3% | Dec 14, 2024 | The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and inclu... |
| CVE-2024-10646 | MEDIUM | 6.1 | 0.3% | Dec 14, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-9698 | HIGH | 7.2 | 1.7% | Dec 14, 2024 | The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2024-12578 | MEDIUM | 5.3 | 0.5% | Dec 14, 2024 | The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to... |
| CVE-2024-12555 | MEDIUM | 6.1 | 0.2% | Dec 14, 2024 | The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2024-12523 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'states_map' shortc... |
| CVE-2024-12517 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The WooCommerce Cart Count Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now