2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10873 | HIGH | 8.8 | 1.1% | Nov 23, 2024 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to... |
| CVE-2024-10606 | MEDIUM | 4.3 | 0.3% | Nov 23, 2024 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized m... |
| CVE-2024-9223 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on ... |
| CVE-2024-11463 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', ... |
| CVE-2024-11415 | HIGH | 8.8 | 0.3% | Nov 23, 2024 | The WP-Orphanage Extended plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
| CVE-2024-11362 | MEDIUM | 6.1 | 0.4% | Nov 23, 2024 | The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is v... |
| CVE-2024-10961 | CRITICAL | 9.8 | 1.2% | Nov 23, 2024 | The Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.9.0... |
| CVE-2024-10886 | MEDIUM | 6.4 | 0.3% | Nov 23, 2024 | The Tribute Testimonials – WordPress Testimonial Grid/Slider plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2024-10874 | MEDIUM | 6.4 | 0.4% | Nov 23, 2024 | The Quotes llama plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'quotes-llama' short... |
| CVE-2024-10869 | MEDIUM | 6.1 | 0.5% | Nov 23, 2024 | The WordPress Brute Force Protection – Stop Brute Force Attacks plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-10868 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in... |
| CVE-2024-10813 | HIGH | 7.5 | 0.6% | Nov 23, 2024 | The Product Table for WooCommerce by CodeAstrology (wooproducttable.com) plugin for WordPress is vulnerable to Sensitive... |
| CVE-2024-10537 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of dat... |
| CVE-2024-10216 | MEDIUM | 4.3 | 0.4% | Nov 23, 2024 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification ... |
| CVE-2024-10116 | MEDIUM | 5.4 | 0.4% | Nov 23, 2024 | The Twitter Follow Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'username' parameter... |
| CVE-2024-41761 | MEDIUM | 5.3 | 0.4% | Nov 23, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv... |
| CVE-2024-11586 | MEDIUM | 4 | 0.3% | Nov 23, 2024 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. |
| CVE-2024-0138 | CRITICAL | 9.8 | 0.9% | Nov 23, 2024 | NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful expl... |
| CVE-2024-0122 | HIGH | 7.6 | 0.2% | Nov 23, 2024 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an u... |
| CVE-2024-52034 | CRITICAL | 10 | 1.7% | Nov 22, 2024 | An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an u... |
| CVE-2024-50054 | HIGH | 8.7 | 0.7% | Nov 22, 2024 | The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker... |
| CVE-2024-47407 | CRITICAL | 10 | 65.6% | Nov 22, 2024 | A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauth... |
| CVE-2024-47138 | CRITICAL | 9.8 | 0.8% | Nov 22, 2024 | The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when... |
| CVE-2024-45369 | CRITICAL | 9.2 | 0.6% | Nov 22, 2024 | The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and au... |
| CVE-2024-11298 | — | — | — | Nov 22, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now