Medium
6d700580-1374-4a17-a6b3-59ba1d063030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-24288
AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Critical
CVE-2021-24285
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
High
CVE-2021-24194
Limit Login Attempts (Spam Protection) <= 2.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
b4d33e69-3620-42d9-adb3-267a5ed02a58
WP Maintenance Mode & Site Under Construction <= 1.8.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
CVE-2021-24191
WP Maintenance Mode & Site Under Construction < 1.8.2 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
7d525c50-5911-4be6-a860-b48db619adba
Limit Login Attempts (Spam Protection) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
CVE-2021-24190
WooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
High
22713937-d834-46cf-83ec-6f9f61b548e3
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Medium
CVE-2021-24291
Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting
Medium
CVE-2021-4332
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2021-4331
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2021-24266
The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24257
Premium Addons for Elementor <=4.2.7 Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24249
Business Directory Plugin – Easy Listing Directories for WordPress <= 5.11.1 - Cross-Site Request Forgery to Arbitrary Listing Export
High
CVE-2021-24248
Business Directory Plugin <= 5.11 - Authenticated PHP4 Upload
High
CVE-2021-36850
Media File Renamer – Auto & Manual Rename <= 5.2.5 - Cross-Site Request Forgery
High
7193b373-a0c9-4cd7-8a53-4f35ceff8f23
Alkubot – Gamify discounts, sell more and give less at the right time < 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-24244
WPBakery Page Builder Clipboard < 4.5.8 - Arbitrary License Options Update
Medium
CVE-2021-24239
Pie Register – User Registration Forms <= 3.7.0.0 - Reflected Cross-Site Scripting
Medium
0444eff7-88bd-4933-94c5-bcb21a044b88
Woocommerce Customers Manager < 26.6 - Reflected Cross-Site Scripting
High
CVE-2021-24230
Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery
Medium
CVE-2021-24226
AccessAlly <= 3.5.6 - Information Exposure
High
CVE-2021-24221
Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.