High
CVE-2021-24777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24311
External Media <= 1.0.33 - Authenticated Arbitrary File Upload
High
CVE-2021-24778
Tradetracker-Store < 4.6.60 - Authenticated SQL Injection
Medium
CVE-2021-24309
Weekly Schedule <= 3.4.2 - Stored Cross-Site Scripting
Medium
CVE-2021-24310
Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title
Medium
CVE-2021-24308
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
High
CVE-2021-24307
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Medium
CVE-2021-24298
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
High
CVE-2021-24299
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
Medium
CVE-2021-24423
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
High
d99614e6-4543-4594-9a46-71ecc986be45
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
Medium
CVE-2021-24306
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2021-24332
Autoptimize <= 2.8.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24294
DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting
Medium
5b05e973-c0ab-492f-8b51-e7c2f33475ad
leads5050-visitor-insights < 1.0.4 - Unauthenticated Arbitrary License Change
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
High
CVE-2021-4444
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
Medium
15d9c743-5700-482a-a6bc-ecf541ea9e7d
leads5050-visitor-insights <= 1.0.5 - Authorization Bypass
High
b6b68e35-ecfb-4876-8fee-c389077b2b4a
Zlick Paywall < 2.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24302
Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24300
PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting
Medium
CVE-2021-24305
Watcheezy Live chat plugin for WordPress <= 2.0 - Stored Cross-Site Scripting
High
e27634f8-493b-4edb-a0c7-1bc8890b70f0
Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery
High
CVE-2021-4447
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.