2024 CVE Vulnerabilities

39,270 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-37468MEDIUM5.3Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2024-37463CRITICAL9.8Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained...
CVE-2024-37456MEDIUM5.3Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained ...
CVE-2024-37453HIGH8.8Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Ac...
CVE-2024-37444CRITICAL9.8Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security...
CVE-2024-37443MEDIUM4.3Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configur...
CVE-2024-37440MEDIUM4.3Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a th...
CVE-2024-37439MEDIUM5.4Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Confi...
CVE-2024-37427MEDIUM5.3Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Securi...
CVE-2024-37425MEDIUM5.4Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly Configur...
CVE-2024-37423HIGH8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack Bloc...
CVE-2024-37415MEDIUM5.4Missing Authorization vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27.
CVE-2024-37411MEDIUM5.3Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Pl...
CVE-2024-37277CRITICAL9.8Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality No...
CVE-2024-37276MEDIUM5.3Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access ...
CVE-2024-37269MEDIUM5.3Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Config...
CVE-2024-37255MEDIUM5.3Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects Elem...
CVE-2024-37254MEDIUM4.3Missing Authorization vulnerability in mndpsingh287 File Manager allows Exploiting Incorrectly Configured Access Control...
CVE-2024-37250MEDIUM5.4Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured...
CVE-2024-37249MEDIUM4.3Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured...
CVE-2024-37232HIGH8.8Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Con...
CVE-2024-37226MEDIUM5.3Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Co...
CVE-2024-37220MEDIUM5.3Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Securit...
CVE-2024-37218MEDIUM4.3Missing Authorization vulnerability in WordPress Page Builder Sandwich Team Page Builder Sandwich – Front-End Page Build...
CVE-2024-37214MEDIUM6.5Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control S...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now