2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54268 | HIGH | 8.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in Greg - SiteOrigin SiteOrigin Widgets Bundle so-widgets-bundle allows Exploiting I... |
| CVE-2024-54267 | MEDIUM | 4.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Exploiting Incorrectly Config... |
| CVE-2024-54266 | MEDIUM | 6.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle Image... |
| CVE-2024-54265 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V. (CEO of ... |
| CVE-2024-54264 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmorillas1 Shortco... |
| CVE-2024-54262 | CRITICAL | 9.9 | 1.4% | Dec 13, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-... |
| CVE-2024-54261 | CRITICAL | 10 | 0.6% | Dec 13, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency ... |
| CVE-2024-54259 | MEDIUM | 6.5 | 0.7% | Dec 13, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DELUCKS DELUCKS SEO delu... |
| CVE-2024-54258 | HIGH | 8.5 | 0.5% | Dec 13, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni CRM... |
| CVE-2024-54256 | HIGH | 7.1 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properl... |
| CVE-2024-54252 | MEDIUM | 6.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly C... |
| CVE-2024-54250 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prodigycommerce Pr... |
| CVE-2024-54248 | HIGH | 8.8 | 0.3% | Dec 13, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in eewee eewee admin custom eewee-admincustom allows Privilege Escalatio... |
| CVE-2024-54246 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs... |
| CVE-2024-54245 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients c... |
| CVE-2024-54244 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Repl... |
| CVE-2024-54243 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza ec... |
| CVE-2024-54242 | MEDIUM | 6.5 | 0.3% | Dec 13, 2024 | Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Conf... |
| CVE-2024-54241 | MEDIUM | 6.5 | 0.3% | Dec 13, 2024 | Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notific... |
| CVE-2024-54240 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazeonline Blaze ... |
| CVE-2024-54239 | CRITICAL | 9.8 | 0.9% | Dec 13, 2024 | Missing Authorization vulnerability in dugudlabs Eyewear prescription form eyewear-prescription-form allows Privilege Es... |
| CVE-2024-54238 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cleveland Heights-... |
| CVE-2024-54237 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni CRM... |
| CVE-2024-54236 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni Woo... |
| CVE-2024-54235 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiptimize Shiptim... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now