Medium
CVE-2021-4410
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-4402
Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
High
CVE-2015-7806
Form Manager <= 1.7.2 - Authenticated Remote Command Execution
Medium
CVE-2021-24373
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-4382
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
Medium
CVE-2021-24379
Comments Like Dislike <= 1.1.2 - Add Like/Dislike Bypass
Medium
bb545a42-6c66-412b-a686-e486b0a58dc5
Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24372
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24382
Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24383
WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Medium
198e8f56-5354-4e5d-af51-54e95d34e25c
Recently <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24364
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Critical
CVE-2020-24186
Comments - wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
Critical
CVE-2021-24361
Location Manager < 2.1.0.10 - SQL Injection
Critical
CVE-2021-4362
Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change
Medium
CVE-2021-24368
Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting
Medium
4b468c0b-88ac-4ea8-97a9-08e206faf0fb
Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting
High
CVE-2021-24520
Stock in & out <= 1.0.4 - SQL Injection
Medium
CVE-2021-24369
WordPress Payments Plugin | GetPaid <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Medium
dd7db465-ebeb-477b-b6c8-a9b89ba2372b
MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect
Medium
a5bcf040-cc43-4b3d-a6fc-d41973725af6
WordPress Bitcoin Payments – Blockonomics <= 3.2 - Reflected Cross-Site Scripting
High
370a6130-425c-4264-baaf-8989d3b00d14
MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery
Critical
CVE-2021-24370
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload
Medium
0f01c9c8-acd4-44c0-8866-a0a819828006
All 404 Redirect to Homepage & Broken images Redirection <= 2.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.