Vulnerabilities published in 2024
52,042 vulnerabilities were published in 2024: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 285 of 521.
- CVE-2024-43233 WordPress BSK Forms Blacklist plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43232 WordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerability
- CVE-2024-43231 WordPress Tutor LMS plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43230 Information disclosure in Shared Files
- CVE-2024-4323 Fluent Bit Memory Corruption Vulnerability
- CVE-2024-43229 WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability
- CVE-2024-43228 WordPress SecuPress Free plugin <= 2.2.5.3 - Broken Access Control vulnerability
- CVE-2024-43227 Cross-site scripting in BetterDocs
- CVE-2024-43226 WordPress WP Dashboard Notes plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43225 WordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43224 WordPress YaMaps for WordPress Plugin plugin <= 0.6.27 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43223 WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability
- CVE-2024-43222 WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability
- CVE-2024-43221 WordPress JetGridBuilder plugin <= 1.1.2 - Local File Inclusion vulnerability
- CVE-2024-43220 WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-4322 Path Traversal in parisneo/lollms-webui
- CVE-2024-43219 WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability
- CVE-2024-43218 WordPress Mediavine Control Panel plugin <= 2.10.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43217 WordPress Kodex Posts likes plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-43216 WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43215 WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability
- CVE-2024-43214 WordPress myCred plugin <= 2.7.2 - Sensitive Data Exposure vulnerability
- CVE-2024-43213 WordPress MultiVendorX Marketplace plugin <= 4.1.17 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-43212 WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability
- CVE-2024-43211 WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability
- CVE-2024-43210 WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.9.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4321 Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt
- CVE-2024-43209 WordPress Bitly's WordPress Plugin plugin <= 2.7.2 - Broken Access Control vulnerability
- CVE-2024-43208 WordPress Send Emails with Mandrill plugin <= 1.4.1 - Broken Access Control vulnerability
- CVE-2024-43207 WordPress Unite Gallery Lite plugin <= 1.7.62 - SQL Injection vulnerability
- CVE-2024-43204 Apache HTTP Server: SSRF with mod_headers setting Content-Type header
- CVE-2024-43202 Apache DolphinScheduler: Remote Code Execution Vulnerability
- CVE-2024-43201 Planet Fitness Workouts mobile apps do not properly validate TLS certificates
- CVE-2024-4320 Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui
- CVE-2024-43199 Privilege escalation in nagios:ndoutils
- CVE-2024-43196 IBM OpenPages data manipulation
- CVE-2024-43192 IBM Storage TS4500 Library cross-site request forgery
- CVE-2024-43191 IBM ManageIQ command execution
- CVE-2024-43190 IBM Engineering Requirements Management DOORS weak authentication
- CVE-2024-4319 Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure
- CVE-2024-43189 IBM Concert Software information disclosure
- CVE-2024-43188 IBM Business Automation Workflow improper input validation
- CVE-2024-43187 IBM Security Verify Access information disclosure
- CVE-2024-43186 IBM InfoSphere Information Server information disclosure
- CVE-2024-43184 IBM Jazz Foundation cross-site scripting
- CVE-2024-43181 Multiple Vulnerabilities in IBM Concert Software
- CVE-2024-43180 IBM Concert information disclosure
- CVE-2024-4318 Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injection
- CVE-2024-43178 Multiple Vulnerabilities in IBM Concert Software.
- CVE-2024-43177 IBM Concert improper certificate validation
- CVE-2024-43176 IBM OpenPages information disclosure
- CVE-2024-43173 IBM Concert information disclosure
- CVE-2024-4317 PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks
- CVE-2024-43169 IBM Engineering Requirements Management DOORS Next file download
- CVE-2024-43168 Unbound: heap-buffer-overflow in unbound
- CVE-2024-43167 Unbound: null pointer dereference in unbound
- CVE-2024-43166 Apache DolphinScheduler Incorrect Default Permissions Vulnerability
- CVE-2024-43165 WordPress WPSection plugin <= 1.3.8 - Contributor+ Limited Local File Inclusion vulnerability
- CVE-2024-43164 WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43163 WordPress ParcelPanel plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-43162 WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability
- CVE-2024-43161 WordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43160 WordPress BerqWP plugin <= 1.7.6 - Unauthenticated Arbitrary File Upload vulnerability
- CVE-2024-4316 Cross-site scripting in EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
- CVE-2024-43159 WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability
- CVE-2024-43158 WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability
- CVE-2024-43157 WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability
- CVE-2024-43156 WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-43155 WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43154 WordPress Advanced Cron Manager – debug & control plugin <= 2.5.9 - Broken Access Control vulnerability
- CVE-2024-43153 WordPress Woffice theme <= 5.4.10 - Unauthenticated Privilege Escalation vulnerability
- CVE-2024-43152 WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43151 WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43150 WordPress Xpro Elementor Addons plugin <= 1.4.4.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4315 LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms
- CVE-2024-43149 WordPress CM Tooltip Glossary Plugin <= 4.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43148 WordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-43147 WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43146 WordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerability
- CVE-2024-43145 WordPress GeoDirectory plugin <= 2.3.61 - SQL Injection vulnerability
- CVE-2024-43144 WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability
- CVE-2024-43143 WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability
- CVE-2024-43142 WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability
- CVE-2024-43141 WordPress Participants Database plugin <= 2.5.9.2 - PHP Object Injection vulnerability
- CVE-2024-43140 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability
- CVE-2024-4314 hostel <= 1.1.5.3 - Cross-Site Request Forgery
- CVE-2024-43139 WordPress Football Pool plugin <= 2.11.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43138 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability
- CVE-2024-43137 WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43136 WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability
- CVE-2024-43135 WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability
- CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability
- CVE-2024-43133 WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43132 SQL injection in Docket (WooCommerce Collections / Wishlist / Watchlist)
- CVE-2024-43131 Missing authorization in Docket (WooCommerce Collections / Wishlist / Watchlist)
- CVE-2024-43130 WordPress Football Pool plugin <= 2.11.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4313 Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
- CVE-2024-43129 WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerability
- CVE-2024-43128 WordPress WooCommerce Product Table Lite plugin <= 3.5.1 - Arbitrary Code Execution vulnerability
- CVE-2024-43127 Cross-site scripting in Products, Order & Customers Export for WooCommerce