Medium
CVE-2021-24771
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24705
NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2021-25079
Contact Form Entries <= 1.2.3 - Reflected Cross-Site Scripting
High
CVE-2021-42362
WordPress Popular Posts <= 5.3.2 - Authenticated Arbitrary File Upload
Medium
CVE-2021-24903
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio <= 6.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-36885
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-36886
Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery
Medium
CVE-2021-42361
Contact Form Email <= 1.3.24 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24896
Caldera forms <= 1.9.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24945
Like Button Rating <= 2.6.37 - Unauthorised Vote Export to Email & IP Addresses Disclosure
High
CVE-2021-36908
WP Reset PRO 5.00-5.98 - Cross-Site Request Forgery
High
CVE-2021-36909
WP Reset – Most Advanced WordPress Reset Tool (PRO) 5.00- 5.98 - Missing Authorization to Database Reset
Medium
CVE-2021-20840
Booking Package <= 1.5.10 - Reflected Cross-Site Scripting
Medium
CVE-2021-24966
Error Log Viewer <= 1.1.1 - Arbitrary File Deletion
Medium
CVE-2021-24958
Meks Easy Photo Feed Widget < 1.2.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24872
Get Custom Field Values < 4.0 - Arbitrary Post Metadata Access
Medium
CVE-2021-24871
Get Custom Field Values <= 4.0.0 - Contributor+ Stored Cross-Site Scripting
Critical
CVE-2021-24951
LearnPress <= 4.1.3 - Authenticated SQL Injection
Medium
e758b973-dc2f-4bcf-9846-56ddd73f38db
Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2021-24930
Bookly <= 20.3 - Staff Member Stored Cross-Site Scripting
Critical
CVE-2021-24943
Registrations for the Events Calendar <= 2.7.5 - Unauthenticated SQL Injection
Medium
CVE-2021-24938
WooCommerce Currency Switcher <= 1.3.7 - Reflected Cross-Site Scripting
High
CVE-2021-24866
WP Data Access <= 4.3.1 - Admin+ SQL Injection
Medium
CVE-2021-24939
LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting via rul_login_url, rul_logout_url Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.