Critical
CVE-2021-24931
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-24935
WP Google Fonts <= 3.1.4 - Reflected Cross-Site Scripting
Medium
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-44777
Email Tracker <= 5.2.6 - Cross-Site Request Forgery
High
CVE-2021-39341
OptinMonster <= 2.6.4 - Unprotected REST-API Endpoints
Medium
CVE-2021-24751
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24908
Check & Log Email <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2021-24748
Email Before Download <= 6.7 - Admin+ SQL Injection
Medium
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Medium
CVE-2021-24768
WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting
Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
Medium
CVE-2021-24822
Stylish Cost Calculator <= 7.0.3 - Stored Cross-Site Scripting
High
CVE-2021-24889
Ninja Forms Contact Form <= 3.6.3 - Authenticated SQL Injection
High
CVE-2021-39333
HashThemes Demo Importer <= 1.1.1 - Missing Authorization to Database Wipe
High
CVE-2021-24877
MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters
High
CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2021-24803
Core Tweaks WP Setup <= 4.1 - Cross-Site Request Forgery
Medium
CVE-2021-24700
Forminator <= 1.15.2 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24796
My Tickets <= 1.8.30 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24758
Email Log <= 2.4.6 - Admin+ SQL Injection
High
CVE-2021-24772
Stream <= 3.8.1 - Admin+ SQL Injection
High
CVE-2021-24847
SEO Redirection <= 8.1 - Subscriber+ SQL Injection
Medium
CVE-2021-43409
WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 15.3 - Stored Cross-Site Scripting
Medium
CVE-2021-36826
WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.