2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37464 | MEDIUM | 4.9 | 0.9% | Jul 9, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Ad... |
| CVE-2024-5946 | MEDIUM | 6.4 | 0.3% | Jul 9, 2024 | The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ta... |
| CVE-2024-5632 | MEDIUM | 5.3 | 0.2% | Jul 9, 2024 | Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network ... |
| CVE-2024-5631 | MEDIUM | 6 | 0.2% | Jul 9, 2024 | Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, are transmitting user'... |
| CVE-2024-4862 | MEDIUM | 5.4 | 0.5% | Jul 9, 2024 | The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sever... |
| CVE-2024-37442 | MEDIUM | 5.5 | 0.4% | Jul 9, 2024 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Phot... |
| CVE-2024-37437 | MEDIUM | 5.4 | 0.3% | Jul 9, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elemento... |
| CVE-2024-37430 | MEDIUM | 5.3 | 0.4% | Jul 9, 2024 | Authentication Bypass by Spoofing vulnerability in patreon Patreon WordPress patreon-connect.This issue affects Patreon ... |
| CVE-2024-37224 | MEDIUM | 6.5 | 0.6% | Jul 9, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &... |
| CVE-2024-6168 | MEDIUM | 4.3 | 0.2% | Jul 9, 2024 | The Just Custom Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu... |
| CVE-2024-6167 | MEDIUM | 4.3 | 0.3% | Jul 9, 2024 | The Just Custom Fields plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capab... |
| CVE-2024-5993 | MEDIUM | 5.4 | 0.5% | Jul 9, 2024 | The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit... |
| CVE-2024-5992 | MEDIUM | 6.5 | 0.5% | Jul 9, 2024 | The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit... |
| CVE-2024-5937 | MEDIUM | 6.4 | 0.3% | Jul 9, 2024 | The Simple Alert Boxes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Alert shortcod... |
| CVE-2024-5856 | MEDIUM | 4.3 | 0.4% | Jul 9, 2024 | The Comment Images Reloaded plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability ... |
| CVE-2024-5810 | MEDIUM | 5.3 | 0.4% | Jul 9, 2024 | The WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access... |
| CVE-2024-5704 | MEDIUM | 4.3 | 0.4% | Jul 9, 2024 | The XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin plugin for WordPress is vulnerable to unauthori... |
| CVE-2024-5669 | MEDIUM | 6.4 | 0.4% | Jul 9, 2024 | The XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] plugin for WordPress is vulnerable to unauthor... |
| CVE-2024-5648 | MEDIUM | 5.4 | 0.5% | Jul 9, 2024 | The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap... |
| CVE-2024-5600 | MEDIUM | 5.4 | 0.3% | Jul 9, 2024 | The SCSS Happy Compiler – Compile SCSS to CSS & Automatic Enqueue plugin for WordPress is vulnerable to Stored Cross-Sit... |
| CVE-2024-5457 | MEDIUM | 5.4 | 0.4% | Jul 9, 2024 | The Panda Video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions... |
| CVE-2024-4868 | MEDIUM | 5.4 | 0.4% | Jul 9, 2024 | The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's EE Event... |
| CVE-2024-4102 | MEDIUM | 5.4 | 0.3% | Jul 9, 2024 | The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on... |
| CVE-2024-4100 | MEDIUM | 5.3 | 0.2% | Jul 9, 2024 | The Pricing Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,... |
| CVE-2024-3608 | MEDIUM | 5.3 | 0.6% | Jul 9, 2024 | The Product Designer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check o... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now