Medium
CVE-2021-24544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-24563
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24487
St Daily Tip <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-42359
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2021-24545
WP HTML Author Bio <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2021-39325
OptinMonster <= 2.6.0 - Reflected Cross-Site Scripting
High
CVE-2021-24754
MainWP Child Reports <= 2.0.7 - Admin+ SQL Injection
Critical
CVE-2021-39331
YITH Easy Login & Register Popup for WooCommerce <= 1.8.0 - Authentication Bypass via Password Reset
Medium
CVE-2021-24612
Sociable <= 4.3.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-36841
YITH Maintenance Mode <= 1.3.7 - Stored Cross-Site Scripting
Medium
CVE-2021-24577
Coming soon and Maintenance mode <= 3.5.2 - Authenticated Stored Cross-Site Scripting
High
7e199cd3-e2ce-4969-a517-4a9c2a84bf44
Travelpayouts <= 1.0.16 - Cross-Site Request Forgery
Medium
CVE-2021-24711
Software License Manager <= 4.5.0 - Cross-Site Request Forgery leading to Arbitrary Domain Deletion
Medium
CVE-2021-24576
Easy Accordion <= 2.0.21 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-38354
GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting
High
CVE-2021-39201
WordPress Core 5.4 - 5.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-38339
Simple Matted Thumbnails <= 1.01 - Reflected Cross-Site Scripting
Medium
CVE-2021-39200
WordPress Core 5.4 - 5.8 - Sensitive Information Disclosure
Medium
CVE-2021-38329
DJ EmailPublish <= 1.7.2 Reflected Cross-Site Scripting
High
CVE-2021-38324
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Medium
CVE-2021-38325
User Activation Email <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24690
Chained Quiz < 1.2.7.2 - Cross-Site Scripting
Medium
CVE-2021-24654
User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24676
Better Find and Replace <= 1.2.8 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.