2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12276 | MEDIUM | 6.5 | 0.3% | Feb 21, 2025 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-13883 | MEDIUM | 4.3 | 0.2% | Feb 21, 2025 | The WPUpper Share Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
| CVE-2024-13751 | MEDIUM | 5.4 | 0.2% | Feb 21, 2025 | The 3D Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'des[]' parameter in all ... |
| CVE-2024-13672 | MEDIUM | 5.4 | 0.3% | Feb 21, 2025 | The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cros... |
| CVE-2024-13537 | MEDIUM | 5.3 | 0.3% | Feb 21, 2025 | The C9 Blocks plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.7.7. Th... |
| CVE-2024-13388 | MEDIUM | 5.4 | 0.2% | Feb 21, 2025 | The TCBD Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbdtooltip_text' s... |
| CVE-2024-13379 | MEDIUM | 5.4 | 0.3% | Feb 21, 2025 | The C9 Admin Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ver... |
| CVE-2024-13235 | MEDIUM | 6.5 | 0.4% | Feb 21, 2025 | The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'l... |
| CVE-2024-38657 | MEDIUM | 4.9 | 1.3% | Feb 21, 2025 | External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version... |
| CVE-2024-7141 | MEDIUM | 5.9 | 0.2% | Feb 20, 2025 | Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw. |
| CVE-2024-55457 | MEDIUM | 6.5 | 3.0% | Feb 20, 2025 | MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit th... |
| CVE-2024-54961 | MEDIUM | 6.5 | 1.5% | Feb 20, 2025 | Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple ... |
| CVE-2024-54960 | MEDIUM | 6.5 | 1.3% | Feb 20, 2025 | A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted pa... |
| CVE-2024-54959 | MEDIUM | 6.1 | 1.0% | Feb 20, 2025 | Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabli... |
| CVE-2024-54958 | MEDIUM | 6.1 | 1.0% | Feb 20, 2025 | Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw al... |
| CVE-2024-49344 | MEDIUM | 4.3 | 0.2% | Feb 20, 2025 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application estab... |
| CVE-2024-49337 | MEDIUM | 5.4 | 0.2% | Feb 20, 2025 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation... |
| CVE-2024-6432 | MEDIUM | 5.4 | 0.3% | Feb 20, 2025 | The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘conte... |
| CVE-2024-13855 | MEDIUM | 4.3 | 0.3% | Feb 20, 2025 | The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up... |
| CVE-2024-13849 | MEDIUM | 4.8 | 0.3% | Feb 20, 2025 | The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and inclu... |
| CVE-2024-13802 | MEDIUM | 5.4 | 0.3% | Feb 20, 2025 | The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintown_e... |
| CVE-2024-13748 | MEDIUM | 4.8 | 0.2% | Feb 20, 2025 | The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title paramet... |
| CVE-2024-13520 | MEDIUM | 5.3 | 0.3% | Feb 20, 2025 | The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to unauthorized m... |
| CVE-2024-13888 | MEDIUM | 6.1 | 0.7% | Feb 20, 2025 | The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This i... |
| CVE-2024-13155 | MEDIUM | 5.4 | 0.3% | Feb 20, 2025 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now