High
CVE-2021-24839
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-25106
Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-24878
SupportCandy <= 2.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24879
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24880
SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode
Medium
CVE-2021-24843
SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
High
CVE-2021-25109
Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24983
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting via AJAX Action
Medium
CVE-2021-24868
Document Embedder <= 1.7.8 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
Medium
CVE-2021-24775
Document Embedder < 1.7.6 - Sensitive Data Exposure
High
CVE-2021-24919
Wicked Folders <= 2.18.9 - Subscriber+ SQL Injection
High
CVE-2021-24688
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24707
Learning Courses < 5.0 - Authenticated Cross-Site Scripting
High
CVE-2021-24704
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24950
Insight Core <= 1.0 - Authenticated PHP Object Injection & Stored Cross-Site Scripting
Medium
CVE-2021-24926
Domain Check <= 1.0.16 - Reflected Cross-Site Scripting via domain
Medium
CVE-2021-24933
Dynamic Widgets <= 1.5.16 - Reflected Cross-Site Scripting
Medium
CVE-2021-24968
Ultimate FAQ <= 2.1.1 - Missing Authorization to Arbitrary FAQ Creation
Medium
CVE-2021-25074
WebP Converter for Media <= 4.0.2 - Unauthenticated Open Redirect
High
CVE-2021-25078
Affiliates Manager <= 2.8.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24923
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting
High
CVE-2021-24750
WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection
Medium
CVE-2021-24965
Five Star Restaurant Reservations <= 2.4.7 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2021-24985
Easy Forms for Mailchimp <= 6.8.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.