2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3917 | MEDIUM | 6.1 | 0.3% | May 23, 2024 | The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2024-3711 | MEDIUM | 4.3 | 0.3% | May 23, 2024 | The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized plugin setting update due to a missing capab... |
| CVE-2024-3626 | MEDIUM | 4.3 | 0.4% | May 23, 2024 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f... |
| CVE-2024-5236 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected ... |
| CVE-2024-5235 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affe... |
| CVE-2024-5234 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. T... |
| CVE-2024-5233 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical... |
| CVE-2024-5232 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critic... |
| CVE-2024-4431 | MEDIUM | 6.4 | 0.4% | May 23, 2024 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ p... |
| CVE-2024-5231 | MEDIUM | 6.5 | 0.4% | May 23, 2024 | A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affec... |
| CVE-2024-4895 | MEDIUM | 4.7 | 0.4% | May 23, 2024 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stor... |
| CVE-2024-5230 | MEDIUM | 6.9 | 18.8% | May 23, 2024 | A vulnerability has been found in EnvaySoft FleetCart up to 4.1.1 and classified as problematic. Affected by this vulner... |
| CVE-2024-4783 | MEDIUM | 6.4 | 0.3% | May 23, 2024 | The jQuery T(-) Countdown Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tmin... |
| CVE-2024-4486 | MEDIUM | 6.4 | 0.3% | May 23, 2024 | The Awesome Contact Form7 for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'AEP C... |
| CVE-2024-3201 | MEDIUM | 6.4 | 0.3% | May 23, 2024 | The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pp_link' s... |
| CVE-2024-3065 | MEDIUM | 4.4 | 0.3% | May 23, 2024 | The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode plugin for WordPress is vulnerable to Stored Cross-Site... |
| CVE-2024-1855 | MEDIUM | 5.3 | 0.4% | May 23, 2024 | The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPr... |
| CVE-2024-22026 | MEDIUM | 6.7 | 1.1% | May 22, 2024 | A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell re... |
| CVE-2024-31895 | MEDIUM | 6.5 | 0.3% | May 22, 2024 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user informa... |
| CVE-2024-31894 | MEDIUM | 4.3 | 0.3% | May 22, 2024 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user informa... |
| CVE-2024-35627 | MEDIUM | 6.1 | 1.0% | May 22, 2024 | tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data... |
| CVE-2024-31904 | MEDIUM | 6.5 | 0.5% | May 22, 2024 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an au... |
| CVE-2024-31893 | MEDIUM | 4.3 | 0.3% | May 22, 2024 | IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar inf... |
| CVE-2024-25737 | MEDIUM | 5.4 | 0.4% | May 22, 2024 | A Server-Side Request Forgery (SSRF) vulnerability in the /Cover/Show route (showAction in CoverController.php) in Open ... |
| CVE-2024-31617 | MEDIUM | 5.3 | 0.4% | May 22, 2024 | OpenLiteSpeed before 1.8.1 mishandles chunked encoding. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now