2024 CVE Vulnerabilities
39,261 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11227 | MEDIUM | 6.4 | 0.5% | Nov 23, 2024 | The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's memberlite_... |
| CVE-2024-11199 | MEDIUM | 5.4 | 1.0% | Nov 23, 2024 | The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rescue_progress... |
| CVE-2024-10519 | MEDIUM | 6.1 | 0.5% | Nov 23, 2024 | The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected Cross-Sit... |
| CVE-2024-9942 | CRITICAL | 9.8 | 1.1% | Nov 23, 2024 | The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing ... |
| CVE-2024-9941 | HIGH | 8.8 | 0.6% | Nov 23, 2024 | The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing ... |
| CVE-2024-9660 | HIGH | 8.8 | 1.0% | Nov 23, 2024 | The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing f... |
| CVE-2024-9659 | CRITICAL | 9.8 | 1.6% | Nov 23, 2024 | The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing f... |
| CVE-2024-9511 | CRITICAL | 9.8 | 1.1% | Nov 23, 2024 | The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for Wo... |
| CVE-2024-10803 | HIGH | 7.5 | 0.9% | Nov 23, 2024 | The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.... |
| CVE-2024-9635 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Checkout with Cash App on WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '... |
| CVE-2024-11446 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Chessgame Shizzle plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'cs_nonce' parameter ... |
| CVE-2024-11330 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_quer... |
| CVE-2024-11265 | MEDIUM | 4.3 | 0.6% | Nov 23, 2024 | The Increase Maximum Upload File Size | Increase Execution Time plugin for WordPress is vulnerable to Full Path Disclosu... |
| CVE-2024-11188 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for Word... |
| CVE-2024-11426 | MEDIUM | 6.4 | 0.4% | Nov 23, 2024 | The AutoListicle: Automatically Update Numbered List Articles plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2024-11408 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti' shortc... |
| CVE-2024-11387 | MEDIUM | 6.4 | 0.7% | Nov 23, 2024 | The Easy Liveblogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'elb_liveblog' sho... |
| CVE-2024-11361 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The PDF Invoices & Packing Slips Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2024-11332 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder. Sign HIPAA documents plugin for WordPress is vulnerable t... |
| CVE-2024-10880 | MEDIUM | 6.1 | 0.5% | Nov 23, 2024 | The JobBoardWP – Job Board Listings and Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting... |
| CVE-2024-10873 | HIGH | 8.8 | 1.1% | Nov 23, 2024 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to... |
| CVE-2024-10606 | MEDIUM | 4.3 | 0.3% | Nov 23, 2024 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized m... |
| CVE-2024-9223 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on ... |
| CVE-2024-11463 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', ... |
| CVE-2024-11415 | HIGH | 8.8 | 0.3% | Nov 23, 2024 | The WP-Orphanage Extended plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now