High
CVE-2021-36850
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2021-24236
Imagements <= 1.2.5 - Arbitrary File Upload
Medium
CVE-2021-24207
WP Page Builder <= 1.2.3 - Insecure Default to Unauthorized Page Editing
High
CVE-2021-24208
WP Page Builder <= 1.2.3 - Multiple Stored Cross-Site scripting
Medium
CVE-2021-24246
WorkScout - Job Board WordPress Theme <= 2.0.31 - Stored Cross-Site Scripting
Medium
CVE-2021-24245
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-24214
OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross-Site Scripting
High
7193b373-a0c9-4cd7-8a53-4f35ceff8f23
Alkubot – Gamify discounts, sell more and give less at the right time < 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-24244
WPBakery Page Builder Clipboard < 4.5.8 - Arbitrary License Options Update
Medium
CVE-2021-24242
Tutor LMS <= 1.8.7 - Authenticated Local File Inclusion
High
1664fef3-6416-4678-9ee7-bed2184d7490
Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections
Medium
CVE-2021-24239
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24243
WPBakery Page Builder Clipboard <= 4.5.5 - Stored Cross-Site Scripting
Critical
CVE-2021-24240
Business Hours Pro <= 5.5.0 - Arbitrary File Upload
Medium
CVE-2021-24658
Erident Custom Login and Dashboard <= 3.5.8 - Authenticated Stored Cross-Site Scripting
Medium
dede9cfc-61f1-4df1-bd40-e5ae73199575
OneLogin SAML SSO <= 3.1.2 - Open Redirection
Medium
CVE-2021-24237
Realteo <= 1.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24234
Ivory Search <= 4.6 - Reflected Cross Site Scripting
High
992b362b-b01f-4c91-83ac-dd612b93ee03
Woocommerce Customers Manager <= 26.5 - Cross-Site Request Forgery to Account Creation
Critical
CVE-2021-4360
Controlled Admin Access < 1.5.6 - Privilege Escalation
Medium
CVE-2021-24233
Cooked Pro <= 1.7.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2021-24232
Advanced Booking Calendar <= 1.6.7 - Reflected Cross-Site Scripting
Medium
0444eff7-88bd-4933-94c5-bcb21a044b88
Woocommerce Customers Manager < 26.6 - Reflected Cross-Site Scripting
High
CVE-2021-24328
WP Login Security and History <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.