2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11888 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The IDer Login for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ider_lo... |
| CVE-2024-11884 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Wp photo text slider 50 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp-photo... |
| CVE-2024-11883 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Connatix Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cnx_script_... |
| CVE-2024-11879 | — | — | — | Dec 14, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-53752. Reason: This candidate is a ... |
| CVE-2024-11877 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Cricket Live Score plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cricket_score... |
| CVE-2024-11876 | MEDIUM | 6.4 | 0.2% | Dec 14, 2024 | The Kredeum NFTs, the easiest way to sell your NFTs directly on your WordPress site plugin for WordPress is vulnerable t... |
| CVE-2024-11873 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The glomex oEmbed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glomex_integration... |
| CVE-2024-11869 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Buk for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buk' shortcode... |
| CVE-2024-11867 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Companion Portfolio – Responsive Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2024-11865 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Tabs Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0 d... |
| CVE-2024-11855 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Koalendar – Events & Appointments Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2024-11770 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Post Carousel & Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'post-cs' ... |
| CVE-2024-11763 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The Plezi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'plezi' shortcode in all ve... |
| CVE-2024-11759 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Bukza plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bukza' shortcode in all ve... |
| CVE-2024-11755 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The IMS Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown post settings in a... |
| CVE-2024-11751 | MEDIUM | 6.4 | 0.4% | Dec 14, 2024 | The TCBD Popover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd-popover-image ... |
| CVE-2024-11462 | MEDIUM | 6.1 | 0.4% | Dec 14, 2024 | The Filestack Official plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fstab' and 'filesta... |
| CVE-2024-11095 | MEDIUM | 6.4 | 0.3% | Dec 14, 2024 | The Visualmodo Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads ... |
| CVE-2024-12553 | MEDIUM | 6.5 | 0.6% | Dec 13, 2024 | GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote atta... |
| CVE-2024-12552 | HIGH | 7.8 | 0.2% | Dec 13, 2024 | Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local ... |
| CVE-2024-55956 | CRITICAL | 9.8 | 93.8% | Dec 13, 2024 | In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can impo... |
| CVE-2024-55946 | HIGH | 8.7 | 0.4% | Dec 13, 2024 | Playloom Engine is an open-source, high-performance game development engine. Engine Beta v0.0.1 has a security vulnerabi... |
| CVE-2024-12632 | — | — | — | Dec 13, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-55956. Reason: This candidate is a duplicate of ... |
| CVE-2024-55890 | MEDIUM | 6.9 | 1.1% | Dec 13, 2024 | D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnera... |
| CVE-2024-47892 | HIGH | 7.8 | 0.1% | Dec 13, 2024 | Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now