Critical
CVE-2021-24148
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24151
WP Editor <= 1.2.6.3 - Authenticated (Admin+) SQL injection
Medium
6da0a85d-0c6f-40ae-8a3d-85222f0e7cc5
Ivory Search – WordPress Search Plugin <= 4.5.10 - Reflected Cross-Site Scripting
High
CVE-2021-24145
Modern Events Calendar Lite <= 5.16.4 - Authenticated Arbitrary File Upload leading to Remote Code Execution
High
CVE-2021-24149
Modern Events Calendar Lite <= 5.16.5 - Authenticated SQL Injection
Medium
CVE-2021-24147
Modern Events Calendar Lite <= 5.16.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24146
Modern Events Calendar Lite <= 5.16.4 - Unauthenticated Events Export
Critical
CVE-2021-4381
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
Critical
CVE-2021-24884
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting
Medium
ec0fff2a-602d-441b-89d1-64d609a4abc0
Popup Builder <= 3.72 Missing Authorization on AJAX actions
Critical
CVE-2021-4370
uListing <= 1.6.6 - Missing Authorization
Critical
CVE-2021-4357
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
Critical
575d1353-70af-4200-9088-662f7a052b76
Super Forms – Drag & Drop Form Builder <= 4.9.700 - Arbitrary File Upload
Medium
CVE-2021-4345
uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Critical
CVE-2021-4346
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Critical
CVE-2021-4343
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
Critical
CVE-2021-4341
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
High
CVE-2021-4339
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Critical
CVE-2021-3120
YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload
High
CVE-2021-24144
Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection
Medium
CVE-2021-4377
Doneren met Mollie <= 2.8.4 - Information Disclosure
High
5294af95-e85f-4425-9c4b-0a92dfac4bd1
Digital Climate Strike WP <= 1.0.0 - Malicious Redirect
Medium
d5df75f8-1250-4b79-a796-9146d3037bec
Under Construction <= 3.85 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24241
Advanced Custom Fields Pro <= 5.9.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.