2024 CVE Vulnerabilities
39,350 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33652 | MEDIUM | 5.3 | 0.5% | Apr 29, 2024 | Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2... |
| CVE-2024-33641 | MEDIUM | 5.4 | 0.3% | Apr 29, 2024 | Deserialization of Untrusted Data vulnerability in Team Yoast Custom field finder.This issue affects Custom field finder... |
| CVE-2024-33634 | MEDIUM | 5.4 | 0.3% | Apr 29, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet ... |
| CVE-2024-33629 | MEDIUM | 4.4 | 0.3% | Apr 29, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail).This issue... |
| CVE-2024-33627 | MEDIUM | 4.4 | 0.3% | Apr 29, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Cusmin Absolutely Glamorous Custom Admin.This issue affects Absolute... |
| CVE-2024-33584 | MEDIUM | 4.7 | 0.4% | Apr 29, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Deepen Bajracharya Video Conferencing with Zoom.Thi... |
| CVE-2024-33575 | MEDIUM | 5.3 | 1.1% | Apr 29, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in User Meta user-meta.This issue affects User ... |
| CVE-2024-33538 | MEDIUM | 5.3 | 0.4% | Apr 29, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Fastline Media LLC Assistant – Every Day Pro... |
| CVE-2024-3196 | MEDIUM | 6.7 | 1.7% | Apr 29, 2024 | A vulnerability was found in MailCleaner up to 2023.03.14. It has been declared as critical. This vulnerability affects ... |
| CVE-2024-3194 | MEDIUM | 6.1 | 0.7% | Apr 29, 2024 | A vulnerability was found in MailCleaner up to 2023.03.14 and classified as problematic. Affected by this issue is some ... |
| CVE-2024-4302 | MEDIUM | 6.1 | 0.4% | Apr 29, 2024 | Super 8 Live Chat online customer service platform fails to properly filter user input, allowing unauthenticated remote ... |
| CVE-2024-33905 | MEDIUM | 4.6 | 0.9% | Apr 29, 2024 | In Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage web_app_open_link event type. |
| CVE-2024-33686 | MEDIUM | 4.3 | 0.5% | Apr 29, 2024 | Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend The... |
| CVE-2024-33632 | MEDIUM | 5.4 | 0.2% | Apr 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet A... |
| CVE-2024-33631 | MEDIUM | 6.5 | 0.4% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Ad... |
| CVE-2024-33630 | MEDIUM | 6.5 | 0.3% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Ad... |
| CVE-2024-33554 | MEDIUM | 6.1 | 0.4% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core... |
| CVE-2024-33542 | MEDIUM | 4.3 | 0.4% | Apr 29, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Fabio Rinaldi Crelly Slider.This issue affects Crelly ... |
| CVE-2024-33540 | MEDIUM | 6.5 | 0.3% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill ColorNe... |
| CVE-2024-33539 | MEDIUM | 5.4 | 0.4% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Addo... |
| CVE-2024-33537 | MEDIUM | 6.5 | 0.4% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Horse WP Por... |
| CVE-2024-1905 | MEDIUM | 5.9 | 0.5% | Apr 29, 2024 | The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2024-33649 | MEDIUM | 6.5 | 0.3% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpOpal Opal Widget... |
| CVE-2024-33648 | MEDIUM | 6.5 | 0.4% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kemory Grubb Recen... |
| CVE-2024-33643 | MEDIUM | 5.9 | 0.3% | Apr 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kailey Lampert Adv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now