2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11380 | MEDIUM | 6.4 | 0.2% | Dec 7, 2024 | The Mini Program API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'qvideo' shortco... |
| CVE-2024-12270 | HIGH | 7.5 | 3.5% | Dec 7, 2024 | The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter ... |
| CVE-2024-12253 | MEDIUM | 5.4 | 0.3% | Dec 7, 2024 | The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthoriz... |
| CVE-2024-12128 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected ... |
| CVE-2024-11374 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The TWChat – Send or receive messages from users plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du... |
| CVE-2024-11367 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Smoove connector for Elementor forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the... |
| CVE-2024-11010 | HIGH | 7.2 | 0.8% | Dec 7, 2024 | The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclu... |
| CVE-2024-53143 | HIGH | 7.8 | 0.2% | Dec 7, 2024 | In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput() and watched_object... |
| CVE-2024-11183 | MEDIUM | 4.8 | 0.3% | Dec 7, 2024 | The Simple Side Tab WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow h... |
| CVE-2024-8679 | MEDIUM | 6.8 | 0.4% | Dec 7, 2024 | The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via t... |
| CVE-2024-7894 | MEDIUM | 5.3 | 0.3% | Dec 7, 2024 | The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing... |
| CVE-2024-12257 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The CardGate Payments for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page... |
| CVE-2024-12167 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wp... |
| CVE-2024-12166 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pag... |
| CVE-2024-12165 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Mollie for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parame... |
| CVE-2024-12115 | MEDIUM | 4.3 | 0.1% | Dec 7, 2024 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request For... |
| CVE-2024-12026 | MEDIUM | 4.3 | 0.3% | Dec 7, 2024 | The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a m... |
| CVE-2024-11943 | MEDIUM | 6.1 | 0.4% | Dec 7, 2024 | The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ... |
| CVE-2024-11904 | MEDIUM | 6.4 | 0.2% | Dec 7, 2024 | The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msntt_add_plus_talk' sh... |
| CVE-2024-11451 | MEDIUM | 6.4 | 0.3% | Dec 7, 2024 | The Zooom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zooom' shortcode in all ve... |
| CVE-2024-11436 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plu... |
| CVE-2024-11353 | MEDIUM | 4.3 | 0.3% | Dec 7, 2024 | The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ... |
| CVE-2024-11329 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Comfino Payment Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_q... |
| CVE-2024-10046 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du... |
| CVE-2024-54138 | MEDIUM | 6.1 | 0.4% | Dec 6, 2024 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to it... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now