2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-51785 | MEDIUM | 4.4 | 0.2% | Nov 9, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Nks Responsive Filterable Portfolio responsive-filterable-portfolio ... |
| CVE-2024-51784 | HIGH | 7.1 | 0.3% | Nov 9, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VietFriend team Fr... |
| CVE-2024-51783 | HIGH | 7.1 | 0.3% | Nov 9, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zaus Forms: 3rd-Pa... |
| CVE-2024-51782 | HIGH | 7.1 | 0.3% | Nov 9, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sanjay Prasad Logi... |
| CVE-2024-51625 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in edckwt Quran Short... |
| CVE-2024-51621 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reza19 Download-Mi... |
| CVE-2024-51620 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in porsline Porsline ... |
| CVE-2024-51619 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in market360 Market 3... |
| CVE-2024-51607 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in percent20 Golf Tra... |
| CVE-2024-51602 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in oleksandr87 Simple... |
| CVE-2024-51601 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Maksym Marko Websi... |
| CVE-2024-51579 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team: ... |
| CVE-2024-51570 | HIGH | 8.5 | 0.4% | Nov 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in odihost Easy Galle... |
| CVE-2024-10871 | CRITICAL | 9.8 | 0.8% | Nov 9, 2024 | The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including... |
| CVE-2024-10801 | CRITICAL | 9.8 | 0.8% | Nov 9, 2024 | The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type va... |
| CVE-2024-10589 | CRITICAL | 9.8 | 0.5% | Nov 9, 2024 | The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can l... |
| CVE-2024-10547 | CRITICAL | 9.8 | 0.8% | Nov 9, 2024 | The WP Membership plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th... |
| CVE-2024-10508 | CRITICAL | 9.8 | 1.5% | Nov 9, 2024 | The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to pr... |
| CVE-2024-9874 | HIGH | 7.2 | 0.7% | Nov 9, 2024 | The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injecti... |
| CVE-2024-10876 | MEDIUM | 6.1 | 0.4% | Nov 9, 2024 | The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul... |
| CVE-2024-10688 | MEDIUM | 4.3 | 0.3% | Nov 9, 2024 | The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2 ... |
| CVE-2024-10683 | MEDIUM | 6.1 | 0.4% | Nov 9, 2024 | The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to ... |
| CVE-2024-8756 | MEDIUM | 5.3 | 0.4% | Nov 9, 2024 | The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions... |
| CVE-2024-10470 | CRITICAL | 9.8 | 34.1% | Nov 9, 2024 | The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file re... |
| CVE-2024-10814 | MEDIUM | 6.4 | 0.3% | Nov 9, 2024 | The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now