Medium
CVE-2021-25004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2021-24947
RVM - Responsive Vector Maps <= 6.4.1 - Subscriber+ Arbitrary File Read
High
CVE-2021-24761
Error Log Viewer by BestWebSoft <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2021-24964
LiteSpeed Cache <= 4.4.3 - Authorization Bypass
Critical
CVE-2021-4455
Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2021-24966
Error Log Viewer <= 1.1.1 - Arbitrary File Deletion
Medium
e758b973-dc2f-4bcf-9846-56ddd73f38db
Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2021-31567
Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2021-43408
Duplicate Post WordPress Plugin <= 1.1.9 - SQL Injection
High
9699118a-e12f-491f-b464-51129888fb1a
Two Way Chat <= 3.1.4 - Authenticated (Admin+) Local File Inclusion
Medium
4fe0df91-21f0-4eef-8064-2b283f38b181
World Travel Information <= 1.0.0 - Reflected Cross-Site Scripting
Critical
04b7a2ba-e299-4781-8ee6-644938bf9629
MStore API < 3.4.5 - Arbitrary File Upload
High
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-24689
Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Authenticated (Admin+) Arbitrary System File Read
Critical
CVE-2021-4436
3DPrint Lite < 1.9.1.5 - Arbitrary File Upload
Medium
CVE-2021-34648
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Medium
CVE-2021-39339
Telefication <= 1.8.0 - Open Relay and Server-Side Request Forgery
High
CVE-2021-24662
Game Server Status <= 1.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2021-24684
PDF Light Viewer <= 1.4.11 - Authenticated Command Injection
Critical
CVE-2021-47940
Download from files <= 1.48 - Arbitrary File Upload
Medium
CVE-2021-38337
RSVPmaker Excel <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-38330
Yet Another bol.com - <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-38333
WP Scrippets <= 1.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-38339
Simple Matted Thumbnails <= 1.01 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.