2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5615 | MEDIUM | 5.3 | 0.5% | Jun 6, 2024 | The Open Graph plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including... |
| CVE-2024-5449 | MEDIUM | 4.3 | 0.3% | Jun 6, 2024 | The WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing plu... |
| CVE-2024-5162 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The WordPress prettyPhoto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in a... |
| CVE-2024-5161 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin f... |
| CVE-2024-5152 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ p... |
| CVE-2024-5141 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Rotating Tweets (Twitter widget and shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... |
| CVE-2024-4707 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_c... |
| CVE-2024-4608 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster plugin for WordPress is vulnera... |
| CVE-2024-4459 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's w... |
| CVE-2024-4458 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in several widgets... |
| CVE-2024-4364 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button wi... |
| CVE-2024-4212 | MEDIUM | 5.4 | 0.4% | Jun 6, 2024 | The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's T... |
| CVE-2024-2922 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget tags in... |
| CVE-2024-1175 | MEDIUM | 5.3 | 0.4% | Jun 6, 2024 | The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to unauthorized loss of data d... |
| CVE-2024-0972 | MEDIUM | 5.3 | 0.4% | Jun 6, 2024 | The BuddyPress Members Only plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, ... |
| CVE-2024-2017 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access du... |
| CVE-2024-5342 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Simple Image Popup Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sip... |
| CVE-2024-5224 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Easy Social Like Box – Popup – Sidebar Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2024-5001 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Image Hover Effects for Elementor with Lightbox and Flipbox plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2024-4942 | MEDIUM | 4.8 | 0.3% | Jun 6, 2024 | The Custom Dash plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up ... |
| CVE-2024-4788 | MEDIUM | 4.3 | 0.3% | Jun 6, 2024 | The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data... |
| CVE-2024-4705 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials ... |
| CVE-2024-2350 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Clever Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CAFE Icon, CAF... |
| CVE-2024-0910 | MEDIUM | 5.3 | 0.5% | Jun 6, 2024 | The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a... |
| CVE-2024-0912 | MEDIUM | 4.2 | 0.2% | Jun 6, 2024 | Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server wil... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now