2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9192 | HIGH | 8.8 | 0.6% | Nov 16, 2024 | The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due t... |
| CVE-2024-8873 | MEDIUM | 6.1 | 0.5% | Nov 16, 2024 | The PeproDev WooCommerce Receipt Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to th... |
| CVE-2024-6628 | MEDIUM | 4.3 | 0.2% | Nov 16, 2024 | The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site R... |
| CVE-2024-11118 | MEDIUM | 5.3 | 0.3% | Nov 16, 2024 | The 404 Error Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2024-11092 | MEDIUM | 6.4 | 0.3% | Nov 16, 2024 | The SVGPlus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versi... |
| CVE-2024-11085 | MEDIUM | 5.4 | 0.3% | Nov 16, 2024 | The WP Log Viewer plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability ch... |
| CVE-2024-10884 | MEDIUM | 6.1 | 0.4% | Nov 16, 2024 | The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the ... |
| CVE-2024-10883 | MEDIUM | 6.1 | 0.4% | Nov 16, 2024 | The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to th... |
| CVE-2024-10875 | MEDIUM | 6.1 | 0.4% | Nov 16, 2024 | The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_... |
| CVE-2024-10533 | MEDIUM | 4.3 | 0.4% | Nov 16, 2024 | The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check... |
| CVE-2024-10262 | MEDIUM | 6.3 | 0.6% | Nov 16, 2024 | The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and... |
| CVE-2024-10147 | MEDIUM | 6.4 | 0.3% | Nov 16, 2024 | The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versio... |
| CVE-2024-10017 | MEDIUM | 6.4 | 0.3% | Nov 16, 2024 | The PJW Mime Config plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio... |
| CVE-2024-10015 | MEDIUM | 6.4 | 0.8% | Nov 16, 2024 | The ConvertCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and '... |
| CVE-2024-10861 | MEDIUM | 5.3 | 0.4% | Nov 16, 2024 | The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorized ... |
| CVE-2024-10795 | MEDIUM | 4.3 | 0.3% | Nov 16, 2024 | The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2... |
| CVE-2024-10786 | MEDIUM | 4.3 | 0.3% | Nov 16, 2024 | The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capabil... |
| CVE-2024-11263 | HIGH | 8.4 | 0.2% | Nov 15, 2024 | When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past t... |
| CVE-2024-11262 | HIGH | 7.8 | 0.4% | Nov 15, 2024 | A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affect... |
| CVE-2024-9500 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer c... |
| CVE-2024-51765 | MEDIUM | 5.5 | 0.1% | Nov 15, 2024 | A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration, ... |
| CVE-2024-51764 | MEDIUM | 5.5 | 0.1% | Nov 15, 2024 | A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configura... |
| CVE-2024-50983 | MEDIUM | 5.4 | 0.3% | Nov 15, 2024 | FlightPath 7.5 contains a Cross Site Scripting (XSS) vulnerability, which allows authenticated remote attackers with adm... |
| CVE-2024-38370 | HIGH | 7.5 | 0.4% | Nov 15, 2024 | GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to downlo... |
| CVE-2024-11261 | MEDIUM | 6.1 | 0.3% | Nov 15, 2024 | A vulnerability, which was classified as critical, was found in SourceCodester Student Record Management System 1.0. Aff... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now