Medium
CVE-2021-24785
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24774
Check & Log Email <= 1.0.2 - Admin+ SQL Injection via Order and OrderBy parameters
Medium
CVE-2021-24514
Visual Form Builder <= 3.0.3 - Admin+ Stored Cross-Site Scripting
Medium
36ae359b-7694-4e8b-9fe6-5e9e40345305
WooCommerce Product Table Lite <= 2.4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24769
Permalink Manager Lite <= 2.2.12 - Admin+ SQL Injection
Medium
CVE-2021-24689
Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Authenticated (Admin+) Arbitrary System File Read
Medium
CVE-2021-24744
Cimatti Contact Forms <= 1.4.11 - Cross-Site Scripting
Medium
e93ad115-1a0b-4d33-b89f-13e39508c9b0
Careerfy <= 7.0 - Cross-Site Request Forgery and Missing Authorization
High
CVE-2021-4358
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2021-4436
3DPrint Lite < 1.9.1.5 - Arbitrary File Upload
High
CVE-2021-4227
ark-commenteditor <= 2.15.6 - iframe Injection
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36823
Absolutely Glamorous Custom Admin <= 6.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36873
WordPress iQ Block Country <= 1.2.11 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-34648
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Medium
CVE-2021-34647
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
Medium
CVE-2021-24699
Easy Media Download <= 1.1.5 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24655
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
Medium
CVE-2021-24653
Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24414
Video Player for YouTube <= 1.3 - Cross-Site Scripting
Medium
CVE-2021-39339
Telefication <= 1.8.0 - Open Relay and Server-Side Request Forgery
Medium
CVE-2021-24544
Responsive WordPress Slider <= 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-24515
Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Stored Cross-Site Scripting
High
CVE-2021-24543
jQuery Reply to Comment <= 1.31 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.