2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-13579 | MEDIUM | 5.4 | 0.2% | Feb 18, 2025 | The WP-Asambleas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'polls_popup' shortc... |
| CVE-2024-13578 | MEDIUM | 5.4 | 0.2% | Feb 18, 2025 | The WP-BibTeX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'WpBibTeX' shortcode in... |
| CVE-2024-13577 | MEDIUM | 5.4 | 0.2% | Feb 18, 2025 | The CATS Job Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catsone' short... |
| CVE-2024-13576 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The Gumlet Video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gumlet' shortcode i... |
| CVE-2024-13573 | MEDIUM | 5.4 | 0.2% | Feb 18, 2025 | The Zigaform – Form Builder Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zgf... |
| CVE-2024-13565 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The Simple Map No Api plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all... |
| CVE-2024-13555 | MEDIUM | 4.3 | 0.2% | Feb 18, 2025 | The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site R... |
| CVE-2024-13540 | MEDIUM | 5.3 | 0.4% | Feb 18, 2025 | The WooODT Lite – Delivery & pickup date time location for WooCommerce plugin for WordPress is vulnerable to Full Path D... |
| CVE-2024-13538 | MEDIUM | 5.3 | 0.6% | Feb 18, 2025 | The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all vers... |
| CVE-2024-13535 | MEDIUM | 5.3 | 0.5% | Feb 18, 2025 | The Actionwear products sync plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and inclu... |
| CVE-2024-13522 | MEDIUM | 5.4 | 0.2% | Feb 18, 2025 | The magayo Lottery Results plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i... |
| CVE-2024-13501 | MEDIUM | 5.4 | 0.4% | Feb 18, 2025 | The WP-FormAssembly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'formassembly' sh... |
| CVE-2024-13464 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The Library Bookshelves plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bookshelf' s... |
| CVE-2024-12813 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The Open Hours – Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ... |
| CVE-2024-12525 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The Easy MLS Listings Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasa... |
| CVE-2024-13740 | MEDIUM | 4.3 | 0.3% | Feb 18, 2025 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Ref... |
| CVE-2024-13741 | MEDIUM | 5.4 | 0.3% | Feb 18, 2025 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Reques... |
| CVE-2024-25066 | MEDIUM | 4.3 | 0.4% | Feb 17, 2025 | RSA Authentication Manager before 8.7 SP2 Patch 1 allows XML External Entity (XXE) attacks via a license file, resulting... |
| CVE-2024-13879 | MEDIUM | 5.5 | 0.3% | Feb 17, 2025 | The Stream plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.2... |
| CVE-2024-47935 | MEDIUM | 6.7 | 0.1% | Feb 17, 2025 | Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforc... |
| CVE-2024-13627 | MEDIUM | 4.7 | 0.8% | Feb 17, 2025 | The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back ... |
| CVE-2024-13608 | MEDIUM | 4.7 | 0.3% | Feb 17, 2025 | The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statemen... |
| CVE-2024-13603 | MEDIUM | 6.1 | 0.4% | Feb 17, 2025 | The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unaut... |
| CVE-2024-57970 | MEDIUM | 4 | 0.2% | Feb 16, 2025 | libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c v... |
| CVE-2024-13834 | MEDIUM | 5.4 | 0.2% | Feb 15, 2025 | The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordP... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now