2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54302 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUF... |
| CVE-2024-54301 | MEDIUM | 6.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manidoraisamy Form... |
| CVE-2024-54300 | MEDIUM | 4.3 | 0.2% | Dec 13, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Cross ... |
| CVE-2024-54299 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revidev Revi.io re... |
| CVE-2024-54298 | MEDIUM | 4.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in sminozzi Car Dealer cardealer allows Exploiting Incorrectly Configured Access Con... |
| CVE-2024-54297 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authe... |
| CVE-2024-54296 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS coschool allows Au... |
| CVE-2024-54295 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mob... |
| CVE-2024-54294 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Appgenix Infotech Firebase OTP Authentication ... |
| CVE-2024-54293 | CRITICAL | 9.8 | 0.6% | Dec 13, 2024 | Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affect... |
| CVE-2024-54292 | CRITICAL | 9.3 | 0.8% | Dec 13, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsplate Appsplat... |
| CVE-2024-54290 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Fletcher Ro... |
| CVE-2024-54289 | MEDIUM | 6.5 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Conf... |
| CVE-2024-54288 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LDD Web Design LDD... |
| CVE-2024-54287 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer ... |
| CVE-2024-54286 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smaily Smaily for ... |
| CVE-2024-54282 | HIGH | 7.2 | 0.8% | Dec 13, 2024 | Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue a... |
| CVE-2024-54278 | MEDIUM | 4.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing ... |
| CVE-2024-54277 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alireza Aliniya Ni... |
| CVE-2024-54276 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devfelixmoira Poll... |
| CVE-2024-54275 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wibergsweb CSV to ... |
| CVE-2024-54274 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace WordPress ... |
| CVE-2024-54273 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issu... |
| CVE-2024-54272 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Radius... |
| CVE-2024-54271 | MEDIUM | 5.4 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now