High
CVE-2021-24465
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Medium
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Medium
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Medium
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Medium
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Medium
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Critical
CVE-2021-34646
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
High
efc434fd-320a-4808-9289-7c2f63d4f5a4
SMTP Mail <= 1.2.1 - SQL Injection
Medium
e9f090bb-8e85-4fc3-a904-0a7ff85db8f1
SMTP Mail <= 1.1.14 - Reflected Cross-Site Scripting
Critical
CVE-2021-24666
Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection
High
002c6fea-4b76-47a6-9a39-1195f18aa6f6
Live Scores for SportsPress <= 1.9.0 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24585
Timetable and Event Schedule by MotoPress <= 2.3.19 - Arbitrary User's Hashed Password/Email/Username Disclosure
Medium
CVE-2021-24724
Timetable and Event Schedule by MotoPress <= 2.3.18 - Author+ Stored Cross-Site Scripting
Medium
CVE-2021-24584
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Update
Medium
CVE-2021-24583
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Deletion
High
CVE-2021-24402
WP iCommerce – the first interactive ecommerce for wordpress <= 1.1.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24403
WordPress Page Contact <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24401
WP Domain Redirect <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
a401db3e-2cf2-4283-bfbe-d4a9587966e1
Jock on air now <= 5.6.1 - Reflected Cross-Site Scripting
High
9cf12dc1-7b66-4c6e-8c3e-5915e1032303
Jock on air now <= 5.6.2 - Unauthenticated Stored Cross-Site Scripting
Medium
898ba68f-2b0c-462a-87ee-272ee624396e
Jock on air now <= 5.6.1 - Cross-Site Request Forgery to Settings Update
High
87b26fcf-d0b3-4ab3-92d8-8f1ba72af0a3
BuddyPress <= 9.0.0 - Information Disclosure via REST API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.