High
CVE-2021-24797
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2021-24846
Ni WooCommerce Custom Order Status <= 1.9.6 - SQL Injection
Medium
CVE-2021-24907
Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting
Critical
CVE-2021-24849
WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2021-42363
Preview E-Mails for WooCommerce <= 1.6.8 - Reflected Cross-Site Scripting
High
CVE-2021-24981
Directorist <= 7.0.6.1 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24756
WP System Log < 1.0.21 - Cross-Site Scripting
Medium
CVE-2021-24954
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
Medium
CVE-2021-24845
Improved Include Page <= 1.2 - Authenticated (Contributor+) Arbitrary Posts/Pages Access
High
CVE-2021-24790
Contact Form Advanced Database <= 1.0.8 - Missing Authorization
High
CVE-2021-24848
Mediamatic – Media Library Folders <= 2.8.0 - SQL Injection
Medium
CVE-2021-24955
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24925
Modern Events Calendar Lite <= 6.1.0 - Reflected Cross-Site Scripting via current_month_divider parameter
Critical
CVE-2021-24857
ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection
Critical
CVE-2021-24946
Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter
Medium
CVE-2021-24932
Auto Featured Image <= 3.9.2 - Reflected Cross-Site Scripting
High
CVE-2021-42362
WordPress Popular Posts <= 5.3.2 - Authenticated Arbitrary File Upload
Medium
CVE-2021-42361
Contact Form Email <= 1.3.24 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24945
Like Button Rating <= 2.6.37 - Unauthorised Vote Export to Email & IP Addresses Disclosure
Medium
CVE-2021-24958
Meks Easy Photo Feed Widget < 1.2.4 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-24943
Registrations for the Events Calendar <= 2.7.5 - Unauthenticated SQL Injection
Medium
CVE-2021-24938
WooCommerce Currency Switcher <= 1.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-24924
Email Log <= 2.4.7 - Reflected Cross-Site Scripting
High
CVE-2021-24914
Tawk.To Live Chat <= 0.5.4 - Missing Authorization to Visitor Monitoring & Chat Removal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.