2024 CVE Vulnerabilities
39,240 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5614 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up... |
| CVE-2024-6569 | MEDIUM | 5.3 | 0.8% | Jul 27, 2024 | The Campaign Monitor for WordPress plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and... |
| CVE-2024-6458 | MEDIUM | 6.4 | 0.3% | Jul 27, 2024 | The WooCommerce Product Table Lite plugin for WordPress is vulnerable to unauthorized post title modification due to a m... |
| CVE-2024-5969 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versi... |
| CVE-2024-42029 | MEDIUM | 6.3 | 0.8% | Jul 27, 2024 | xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e... |
| CVE-2024-6661 | MEDIUM | 4.4 | 0.3% | Jul 27, 2024 | The ParityPress – Parity Pricing with Discount Rules plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2024-6634 | MEDIUM | 6.4 | 0.3% | Jul 27, 2024 | The Master Currency WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currencyconver... |
| CVE-2024-6591 | MEDIUM | 5.8 | 0.4% | Jul 27, 2024 | The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized email creation and sending due ... |
| CVE-2024-6573 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Intelligence plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.0.... |
| CVE-2024-6566 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Aramex Shipping WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and in... |
| CVE-2024-6549 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Admin Post Navigation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and includin... |
| CVE-2024-6548 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Add Admin JavaScript plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including... |
| CVE-2024-6547 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Add Admin CSS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0.1... |
| CVE-2024-6546 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and inclu... |
| CVE-2024-6545 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Admin Trim Interface plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including... |
| CVE-2024-6431 | HIGH | 8.8 | 0.8% | Jul 27, 2024 | The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati... |
| CVE-2024-6152 | HIGH | 8.8 | 0.6% | Jul 27, 2024 | The Flipbox Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5... |
| CVE-2024-4410 | MEDIUM | 5.4 | 0.4% | Jul 27, 2024 | The IgnitionDeck Crowdfunding Platform plugin for WordPress is vulnerable to Missing Authorization in versions up to, an... |
| CVE-2024-1804 | MEDIUM | 4.3 | 0.3% | Jul 27, 2024 | The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ... |
| CVE-2024-1798 | MEDIUM | 5.3 | 0.4% | Jul 27, 2024 | The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi... |
| CVE-2024-40433 | HIGH | 8.8 | 1.2% | Jul 26, 2024 | Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view... |
| CVE-2024-37034 | MEDIUM | 5.9 | 0.2% | Jul 26, 2024 | An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are... |
| CVE-2024-41815 | HIGH | 7 | 0.5% | Jul 26, 2024 | Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable ... |
| CVE-2024-41628 | HIGH | 7.5 | 6.5% | Jul 26, 2024 | Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and ... |
| CVE-2024-41120 | CRITICAL | 9.8 | 0.8% | Jul 26, 2024 | streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now