Medium
CVE-2021-46780
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24800
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
High
CVE-2021-24957
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
High
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Medium
574dd6d8-14df-47b8-bf03-28a3c02b73ec
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
Medium
CVE-2021-24805
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Medium
CVE-2022-0314
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-25111
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Medium
CVE-2021-36846
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-27845
Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting
Medium
CVE-2022-27844
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
Medium
CVE-2022-0864
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
High
CVE-2022-0993
SiteGround Security <= 1.2.5 - Authorization Weakness to Authentication Bypass
Medium
CVE-2022-1046
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
Medium
CVE-2022-0901
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
Medium
89a23d5a-7728-403e-b654-595d92c20b66
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update
Critical
CVE-2022-0992
SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup
Medium
CVE-2022-0428
Content Egg <= 5.3.0 - Reflected Cross-Site Scripting
High
5e6218e5-84d9-4180-8275-7da24c554c72
Unify <= 3.2.5 - Cross-Site Scripting
Medium
CVE-2021-36896
Pricing Table <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2021-36910
WP-Appbox <= 4.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-25086
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Critical
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.