2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54277 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alireza Aliniya Ni... |
| CVE-2024-54276 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devfelixmoira Poll... |
| CVE-2024-54275 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wibergsweb CSV to ... |
| CVE-2024-54274 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace WordPress ... |
| CVE-2024-54273 | CRITICAL | 9.8 | 0.7% | Dec 13, 2024 | Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issu... |
| CVE-2024-54272 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Radius... |
| CVE-2024-54271 | MEDIUM | 5.4 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured... |
| CVE-2024-54268 | HIGH | 8.8 | 0.6% | Dec 13, 2024 | Missing Authorization vulnerability in Greg - SiteOrigin SiteOrigin Widgets Bundle so-widgets-bundle allows Exploiting I... |
| CVE-2024-54267 | MEDIUM | 4.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Exploiting Incorrectly Config... |
| CVE-2024-54266 | MEDIUM | 6.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle Image... |
| CVE-2024-54265 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dmitry V. (CEO of ... |
| CVE-2024-54264 | HIGH | 7.1 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmorillas1 Shortco... |
| CVE-2024-54262 | CRITICAL | 9.9 | 1.4% | Dec 13, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-... |
| CVE-2024-54261 | CRITICAL | 10 | 0.6% | Dec 13, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency ... |
| CVE-2024-54259 | MEDIUM | 6.5 | 0.7% | Dec 13, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DELUCKS DELUCKS SEO delu... |
| CVE-2024-54258 | HIGH | 8.5 | 0.5% | Dec 13, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni CRM... |
| CVE-2024-54256 | HIGH | 7.1 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properl... |
| CVE-2024-54252 | MEDIUM | 6.3 | 0.4% | Dec 13, 2024 | Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly C... |
| CVE-2024-54250 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prodigycommerce Pr... |
| CVE-2024-54248 | HIGH | 8.8 | 0.3% | Dec 13, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in eewee eewee admin custom eewee-admincustom allows Privilege Escalatio... |
| CVE-2024-54246 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs... |
| CVE-2024-54245 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients c... |
| CVE-2024-54244 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Repl... |
| CVE-2024-54243 | MEDIUM | 6.5 | 0.4% | Dec 13, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza ec... |
| CVE-2024-54242 | MEDIUM | 6.5 | 0.3% | Dec 13, 2024 | Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Conf... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now