2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-35751 | MEDIUM | 4.8 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Creative Mo... |
| CVE-2024-35740 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Frees... |
| CVE-2024-35739 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Po... |
| CVE-2024-35738 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kognetiks K... |
| CVE-2024-35737 | MEDIUM | 6.1 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Loopus WP V... |
| CVE-2024-35734 | MEDIUM | 6.1 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople ... |
| CVE-2024-35733 | MEDIUM | 6.1 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RLDD Auto C... |
| CVE-2024-35732 | MEDIUM | 4.8 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH Cust... |
| CVE-2024-35731 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Moose Ke... |
| CVE-2024-35730 | MEDIUM | 6.1 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 ... |
| CVE-2024-5766 | MEDIUM | 4.8 | 0.3% | Jun 8, 2024 | A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown process... |
| CVE-2024-35756 | MEDIUM | 4.8 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CeiKay Tool... |
| CVE-2024-35755 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in El tiempo W... |
| CVE-2024-35753 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TemplatesNe... |
| CVE-2024-5654 | MEDIUM | 6.5 | 0.4% | Jun 8, 2024 | The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing... |
| CVE-2024-4468 | MEDIUM | 5.4 | 0.4% | Jun 8, 2024 | The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a mis... |
| CVE-2024-5091 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Age Gate... |
| CVE-2024-5638 | MEDIUM | 6.1 | 0.4% | Jun 8, 2024 | The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_custom... |
| CVE-2024-5613 | MEDIUM | 6.1 | 0.4% | Jun 8, 2024 | The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'quality_c... |
| CVE-2024-5087 | MEDIUM | 5.4 | 0.4% | Jun 8, 2024 | The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to unauthorized modification of data due t... |
| CVE-2024-4661 | MEDIUM | 4.3 | 0.3% | Jun 8, 2024 | The WP Reset plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o... |
| CVE-2024-5770 | MEDIUM | 4.3 | 0.3% | Jun 8, 2024 | The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a m... |
| CVE-2024-5663 | MEDIUM | 5.4 | 0.3% | Jun 8, 2024 | The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Cards wi... |
| CVE-2024-37162 | MEDIUM | 5.3 | 0.3% | Jun 7, 2024 | zsa is a library for building typesafe server actions in Next.js. All users are impacted. The zsa application transfers ... |
| CVE-2024-36788 | MEDIUM | 4.8 | 0.3% | Jun 7, 2024 | Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now