2024 CVE Vulnerabilities

39,350 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-32834MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooComme...
CVE-2024-32833MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Halsey List C...
CVE-2024-32815MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters All-...
CVE-2024-32801MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin Widge...
CVE-2024-32791MEDIUM5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add...
CVE-2024-32835MEDIUM5.4Deserialization of Untrusted Data vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Exp...
CVE-2024-32817MEDIUM4.4Deserialization of Untrusted Data vulnerability in Javier Carazo Import and export users and customers import-users-from...
CVE-2024-32812MEDIUM5.4Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast...
CVE-2024-32803MEDIUM6.4Server-Side Request Forgery (SSRF) vulnerability in 2day.Sk, Webikon SuperFaktura WooCommerce.This issue affects SuperFa...
CVE-2024-32796MEDIUM4.3Insertion of Sensitive Information Into Sent Data vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite allows Retr...
CVE-2024-32788MEDIUM5.3Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG Joomla to WordPress.This issue affe...
CVE-2024-32782MEDIUM6.5Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue aff...
CVE-2024-32780MEDIUM5.9Exposure of Sensitive Information to an Unauthorized Actor vulnerability in E4J s.R.L. VikRentCar.This issue affects Vik...
CVE-2024-32775MEDIUM4.9Server-Side Request Forgery (SSRF) vulnerability in Pavex Embed Google Photos album.This issue affects Embed Google Phot...
CVE-2024-32718MEDIUM5.4Server-Side Request Forgery (SSRF) vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elementor ad...
CVE-2024-32716MEDIUM5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StreamWeasels StreamWeasels Twitch Integrati...
CVE-2024-28977MEDIUM5.5Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local ...
CVE-2024-28963MEDIUM5.5Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthen...
CVE-2024-32955MEDIUM4.9Server-Side Request Forgery (SSRF) vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowpla...
CVE-2024-32951MEDIUM6.5Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks...
CVE-2024-32819MEDIUM4.9Server-Side Request Forgery (SSRF) vulnerability in Culqi.This issue affects Culqi: from n/a through 3.0.14.
CVE-2024-32051MEDIUM6.5Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is ...
CVE-2024-3261MEDIUM4.8The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields befor...
CVE-2024-2404MEDIUM5.4The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow l...
CVE-2024-2402MEDIUM5.4The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow h...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now