2024 CVE Vulnerabilities

39,358 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-1046MEDIUM5.4The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres...
CVE-2024-0969MEDIUM5.3The ARMember plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, ...
CVE-2024-0961MEDIUM5.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the code editor in a...
CVE-2024-0954MEDIUM5.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress...
CVE-2024-0869MEDIUM6.5The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulner...
CVE-2024-0859MEDIUM4.3The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu...
CVE-2024-0835MEDIUM4.3The Royal Elementor Kit theme for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing ca...
CVE-2024-0834MEDIUM5.4The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_to parameter...
CVE-2024-0823MEDIUM5.4The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' u...
CVE-2024-0797MEDIUM4.3The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is v...
CVE-2024-0796MEDIUM4.3The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store plugin for WordPress is v...
CVE-2024-0791MEDIUM4.3The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized acces...
CVE-2024-0790MEDIUM4.3The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request...
CVE-2024-0701MEDIUM5.3The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. T...
CVE-2024-0691MEDIUM4.8The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all version...
CVE-2024-0678MEDIUM6.1The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ava...
CVE-2024-0660MEDIUM4.3The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress i...
CVE-2024-0659MEDIUM4.8The Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerabl...
CVE-2024-0630MEDIUM4.8The WP RSS Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the RSS feed source in all v...
CVE-2024-0612MEDIUM4.8The Content Views – Post Grid, Slider, Accordion (Gutenberg Blocks and Shortcode) plugin for WordPress is vulnerable to ...
CVE-2024-0597MEDIUM4.8The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a...
CVE-2024-0586MEDIUM6.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress...
CVE-2024-0585MEDIUM5.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress...
CVE-2024-0509MEDIUM6.1The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘r...
CVE-2024-0508MEDIUM5.4The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Ta...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now