Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
6a906f90-fac2-43cf-8f67-99f8862dc636
Ibtana - Ecommerce Product Addons <= 0.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24822
Stylish Cost Calculator <= 7.0.3 - Stored Cross-Site Scripting
High
CVE-2021-24755
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection
Medium
CVE-2021-24918
Smash Balloon Social Post Feed <= 4.0 - Arbitrary Plugin Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-23174
Download Monitor <= 4.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-31567
Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2021-36920
Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24749
URL Shortify <= 1.5.0 - Cross-Site Request Forgery
Medium
6e53e70f-45fc-41a6-8436-a8b14f7685d0
Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
40488ed8-ab4c-4ba6-821e-ed6d7a63e260
Hotel Listings < 1.3.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-4340
uListing <= 1.6.6 - Unauthenticated SQL Injection
Medium
CVE-2021-36843
Social Media Flying Icons | Floating Social Media Icon <= 4.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24917
WPS Hide Login <= 1.9.0 - Hidden Login Page Location Disclosure
Medium
CVE-2021-24876
Registrations for The Events Calendar <= 2.7.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-24745
About Author Box < 1.0.2 - Cross-Site Scripting
High
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
Medium
CVE-2021-24842
Bulk Datetime Change <= 1.11 - Missing Authorisation
High
CVE-2021-39333
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe
Medium
CVE-2021-39340
Notification – Custom Notifications and Alerts for WordPress <= 7.2.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24883
Popup Anything <= 2.0.3 - Contributor+ Stored Cross-Site Scripting
Medium
b28ba929-d057-43f9-b839-62347c06c1bd
WP Spell Check <= 9.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24882
Slideshow Gallery < 1.7.4 - Cross-Site Scripting
High
CVE-2021-24877
MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.