2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-13220 | MEDIUM | 6.1 | 0.6% | Jan 31, 2025 | The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a... |
| CVE-2024-13219 | MEDIUM | 6.1 | 0.6% | Jan 31, 2025 | The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it b... |
| CVE-2024-13218 | MEDIUM | 6.1 | 0.3% | Jan 31, 2025 | The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2024-13216 | MEDIUM | 4.3 | 0.3% | Jan 31, 2025 | The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information ... |
| CVE-2024-13112 | MEDIUM | 6.1 | 0.6% | Jan 31, 2025 | The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2024-13101 | MEDIUM | 5.4 | 0.3% | Jan 31, 2025 | The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before o... |
| CVE-2024-13100 | MEDIUM | 6.1 | 0.3% | Jan 31, 2025 | The OPSI Israel Domestic Shipments WordPress plugin through 2.6.3 does not sanitise and escape a parameter before output... |
| CVE-2024-12872 | MEDIUM | 4.8 | 0.2% | Jan 31, 2025 | The Zalomení WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow high priv... |
| CVE-2024-12772 | MEDIUM | 5.4 | 0.3% | Jan 31, 2025 | The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in t... |
| CVE-2024-12275 | MEDIUM | 6.1 | 0.3% | Jan 31, 2025 | The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2024-11886 | MEDIUM | 6.4 | 0.3% | Jan 31, 2025 | The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... |
| CVE-2024-10867 | MEDIUM | 5.4 | 0.3% | Jan 31, 2025 | The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t... |
| CVE-2024-13463 | MEDIUM | 6.4 | 0.2% | Jan 31, 2025 | The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in al... |
| CVE-2024-13399 | MEDIUM | 6.4 | 0.3% | Jan 31, 2025 | The Gosign – Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-... |
| CVE-2024-13397 | MEDIUM | 6.4 | 0.4% | Jan 31, 2025 | The WPRadio – WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2024-13396 | MEDIUM | 6.4 | 0.4% | Jan 31, 2025 | The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form' ... |
| CVE-2024-23970 | MEDIUM | 6.5 | 0.2% | Jan 31, 2025 | This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of Charg... |
| CVE-2024-23962 | MEDIUM | 5.3 | 0.7% | Jan 31, 2025 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 d... |
| CVE-2024-23937 | MEDIUM | 4.3 | 0.4% | Jan 31, 2025 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sili... |
| CVE-2024-23930 | MEDIUM | 4.3 | 0.5% | Jan 31, 2025 | This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations o... |
| CVE-2024-23928 | MEDIUM | 6.5 | 0.2% | Jan 31, 2025 | This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i... |
| CVE-2024-10604 | MEDIUM | 5.3 | 0.2% | Jan 30, 2025 | Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, ... |
| CVE-2024-10603 | MEDIUM | 5.3 | 0.3% | Jan 30, 2025 | Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be ... |
| CVE-2024-10026 | MEDIUM | 5.3 | 0.2% | Jan 30, 2025 | A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate ... |
| CVE-2024-55417 | MEDIUM | 4.3 | 12.3% | Jan 30, 2025 | DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user u... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now