2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9772 | HIGH | 7.3 | 1.4% | Oct 26, 2024 | The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution i... |
| CVE-2024-9116 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The Monkee-Boy Essentials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ... |
| CVE-2024-10357 | MEDIUM | 4.3 | 0.4% | Oct 26, 2024 | The Clever Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up ... |
| CVE-2024-9967 | MEDIUM | 5.4 | 0.3% | Oct 26, 2024 | The WP show more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_more shortcode ... |
| CVE-2024-9853 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The ID-SK Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions... |
| CVE-2024-9642 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The Editor Custom Color Palette plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i... |
| CVE-2024-9637 | HIGH | 8.8 | 0.5% | Oct 26, 2024 | The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account take... |
| CVE-2024-8392 | HIGH | 7.2 | 0.7% | Oct 26, 2024 | The WordPress Post Grid Layouts with Pagination – Sogrid plugin for WordPress is vulnerable to Local File Inclusion in a... |
| CVE-2024-0128 | HIGH | 7.1 | 0.2% | Oct 26, 2024 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access gl... |
| CVE-2024-0127 | HIGH | 7.8 | 0.2% | Oct 26, 2024 | NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors... |
| CVE-2024-10092 | MEDIUM | 4.3 | 0.4% | Oct 26, 2024 | The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2024-0126 | HIGH | 8.2 | 0.3% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to esca... |
| CVE-2024-0121 | HIGH | 7.8 | 0.4% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use... |
| CVE-2024-0120 | HIGH | 7.8 | 0.4% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use... |
| CVE-2024-0119 | HIGH | 7.8 | 0.4% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use... |
| CVE-2024-0118 | HIGH | 7.8 | 0.4% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use... |
| CVE-2024-0117 | HIGH | 7.8 | 0.4% | Oct 26, 2024 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use... |
| CVE-2024-9456 | MEDIUM | 6.4 | 0.3% | Oct 26, 2024 | The WP Awesome Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi... |
| CVE-2024-8870 | MEDIUM | 6.1 | 0.5% | Oct 26, 2024 | The Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-9933 | CRITICAL | 9.8 | 1.9% | Oct 26, 2024 | The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. T... |
| CVE-2024-9932 | CRITICAL | 9.8 | 37.8% | Oct 26, 2024 | The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validatio... |
| CVE-2024-9931 | CRITICAL | 9.8 | 0.5% | Oct 26, 2024 | The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0.... |
| CVE-2024-9930 | CRITICAL | 9.8 | 0.5% | Oct 26, 2024 | The Extensions by HocWP Team plugin for WordPress is vulnerable to authentication bypass in versions up to, and includin... |
| CVE-2024-9890 | HIGH | 8.8 | 1.0% | Oct 26, 2024 | The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. Th... |
| CVE-2024-9626 | MEDIUM | 4.3 | 0.3% | Oct 26, 2024 | The Editorial Assistant by Sovrn plugin for WordPress is vulnerable to unauthorized modification of data due to a missin... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now