2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10233 | MEDIUM | 5.4 | 0.3% | Oct 29, 2024 | The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th... |
| CVE-2024-10185 | MEDIUM | 6.4 | 0.4% | Oct 29, 2024 | The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's... |
| CVE-2024-10184 | MEDIUM | 6.4 | 0.4% | Oct 29, 2024 | The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw... |
| CVE-2024-9376 | MEDIUM | 6.4 | 0.4% | Oct 29, 2024 | The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2024-50550 | CRITICAL | 9.8 | 0.9% | Oct 29, 2024 | Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege ... |
| CVE-2024-10437 | MEDIUM | 4.3 | 0.4% | Oct 29, 2024 | The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to unauthorized Smar Message activation/deacti... |
| CVE-2024-10436 | HIGH | 8.8 | 0.7% | Oct 29, 2024 | The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,... |
| CVE-2024-10227 | MEDIUM | 6.4 | 0.3% | Oct 29, 2024 | The affiliate-toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's atkp_product sh... |
| CVE-2024-9438 | MEDIUM | 6.1 | 0.4% | Oct 29, 2024 | The SEUR Oficial plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'change_service' parameter... |
| CVE-2024-50490 | CRITICAL | 9.8 | 1.0% | Oct 29, 2024 | Missing Authorization vulnerability in lowcage PegaPoll pegapoll allows Accessing Functionality Not Properly Constrained... |
| CVE-2024-50485 | CRITICAL | 9.8 | 1.0% | Oct 29, 2024 | Incorrect Privilege Assignment vulnerability in Udit Rawat Exam Matrix exam-matrix allows Privilege Escalation.This issu... |
| CVE-2024-50481 | HIGH | 8.8 | 0.4% | Oct 29, 2024 | Incorrect Privilege Assignment vulnerability in stackthemes Bstone Demo Importer bstone-demo-importer allows Privilege E... |
| CVE-2024-50476 | CRITICAL | 9.8 | 1.2% | Oct 29, 2024 | Missing Authorization vulnerability in GRÜN Software Group GmbH GRÜN spendino Spendenformular spendino allows Privilege ... |
| CVE-2024-50475 | CRITICAL | 9.8 | 1.2% | Oct 29, 2024 | Missing Authorization vulnerability in Scott Gamon Signup Page signup-page allows Privilege Escalation.This issue affect... |
| CVE-2024-50473 | CRITICAL | 10 | 1.0% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-em... |
| CVE-2024-50427 | CRITICAL | 9.9 | 1.0% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects Surv... |
| CVE-2024-50426 | MEDIUM | 4.8 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Mak... |
| CVE-2024-50420 | CRITICAL | 10 | 0.5% | Oct 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in aDirectory aDirectory adirectory allows Upload a Web Sh... |
| CVE-2024-50418 | MEDIUM | 6.5 | 0.2% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Time Slot Booking ... |
| CVE-2024-50415 | MEDIUM | 5.9 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Ads.txt & Ap... |
| CVE-2024-50414 | MEDIUM | 5.9 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buttonizer Button ... |
| CVE-2024-50413 | MEDIUM | 5.9 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Javier Carazo Impo... |
| CVE-2024-50412 | MEDIUM | 5.9 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jules Colle Condit... |
| CVE-2024-50411 | MEDIUM | 4.8 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevon Adonis WP Ab... |
| CVE-2024-49642 | MEDIUM | 6.1 | 0.3% | Oct 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rafasashi Todo Cus... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now