High
CVE-2021-38324
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-38319
More From Google <= 0.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-38316
WP Academic People List <= 0.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-36871
WP Google Maps Pro <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-38317
Konnichiwa! Membership <= 0.8.3 Reflected Cross-Site Scripting
Medium
CVE-2021-38325
User Activation Email <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24709
Weather Effect – Christmas Santa Snow Falling <= 1.3.5 - Stored Cross-Site Scripting
Medium
CVE-2021-24715
WP Sitemap Page <= 1.6.6 - Admin+ Stored Cross Site Scripting
Medium
CVE-2021-24690
Chained Quiz < 1.2.7.2 - Cross-Site Scripting
High
CVE-2021-4337
Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization
High
CVE-2021-24683
Weather Effect – Christmas Santa Snow Falling <= 1.3.3 - Cross-Site Request Forgery
Medium
CVE-2021-24687
Modern Events Calendar Lite < 5.22.1 - Admin+ Stored Cross-Site Scripting
Medium
eb49e8d5-1f4f-46d1-8206-0a43b4284f19
My Chatbot <= 1.1 - Reflected Cross-Site Scripting
Critical
CVE-2021-4380
Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update
Critical
CVE-2021-4374
WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
Medium
c1b0ac88-8afd-4e46-9721-7aab91090e37
PublishPress: Editorial Calendar, Workflow, Comments, Notifications and Statuses <= 3.5.0 - Cross-Site Scripting
Medium
CVE-2021-24654
User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24673
Appointment Hour Booking <= 1.3.15 Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24676
Better Find and Replace <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-24679
Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop <= 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24678
CM Tooltip Glossary <= 3.9.20 - Authenticated Stored Cross-Site Scripting
High
284b9b04-aa8f-41ff-b944-3488c5da8e20
Listing, Classified Ads & Business Directory – uListing <= 2.0.8 - Cross-Site Request Forgery
Medium
1522d23b-7655-4fde-a18b-b46c6625185f
UsersWP – User Registration & User Profile <= 1.2.2.28 - Reflected Cross-Site Scripting
Medium
0ef7d891-0efa-45e5-ad16-2f34fc017c8f
ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.2.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.