2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11354 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized modification of... |
| CVE-2024-11334 | MEDIUM | 5.3 | 0.6% | Nov 21, 2024 | The My Contador lesr plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check... |
| CVE-2024-11320 | CRITICAL | 9.8 | 90.5% | Nov 21, 2024 | Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication me... |
| CVE-2024-11197 | MEDIUM | 4.2 | 0.4% | Nov 21, 2024 | The Lock User Account plugin for WordPress is vulnerable to user lock bypass in all versions up to, and including, 1.0.5... |
| CVE-2024-10898 | HIGH | 8.8 | 1.3% | Nov 21, 2024 | The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in... |
| CVE-2024-10890 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use o... |
| CVE-2024-10796 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Information Exposure in all versions up ... |
| CVE-2024-10792 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels plugin for WordPress is vulnerable to Reflected Cros... |
| CVE-2024-10788 | HIGH | 7.2 | 0.8% | Nov 21, 2024 | The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... |
| CVE-2024-10785 | MEDIUM | 5.4 | 0.4% | Nov 21, 2024 | The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Si... |
| CVE-2024-10782 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The Theme Builder For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and in... |
| CVE-2024-10726 | MEDIUM | 6.1 | 0.3% | Nov 21, 2024 | The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t... |
| CVE-2024-10696 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere El... |
| CVE-2024-10682 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting d... |
| CVE-2024-10675 | MEDIUM | 6.1 | 0.4% | Nov 21, 2024 | The affiliate-toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via a URL in all versions up ... |
| CVE-2024-10671 | MEDIUM | 6.5 | 0.5% | Nov 21, 2024 | The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information E... |
| CVE-2024-10623 | MEDIUM | 6.1 | 0.4% | Nov 21, 2024 | The ForumEngine theme for WordPress is vulnerable to Reflected Cross-Site Scripting via a URL in all versions up to, and... |
| CVE-2024-10532 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The Bard Extra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check... |
| CVE-2024-10528 | MEDIUM | 4.3 | 0.6% | Nov 21, 2024 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-10522 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Co-marquage service-public.fr plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of... |
| CVE-2024-10482 | MEDIUM | 5.4 | 0.4% | Nov 21, 2024 | The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does n... |
| CVE-2024-10403 | HIGH | 7.5 | 0.6% | Nov 21, 2024 | Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFT... |
| CVE-2024-10400 | HIGH | 7.5 | 82.6% | Nov 21, 2024 | The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘rating_filter’ parameter in all versions up t... |
| CVE-2024-10393 | MEDIUM | 5.3 | 0.6% | Nov 21, 2024 | The Tutor LMS plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 2.7.6.... |
| CVE-2024-10316 | MEDIUM | 4.3 | 0.5% | Nov 21, 2024 | The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now