Medium
CVE-2021-24166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-24164
Ninja Forms <= 3.4.34 - Authenticated OAuth Connection Key Disclosure
High
CVE-2021-24163
Ninja Forms Contact Form <= 3.4.33 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
Medium
CVE-2021-24165
Ninja Forms Contact Form <= 3.4.33 - Administrator Open Redirect
High
CVE-2021-24160
Responsive Menu 4.0 - 4.0.3 - Authenticated Arbitrary File Upload
High
CVE-2021-24161
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2021-24162
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Setting Modification
Critical
CVE-2021-24148
MStore API <= 3.1.9 - Authentication Bypass
Critical
CVE-2021-24884
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2021-4346
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Critical
CVE-2021-4341
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
High
CVE-2021-4339
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Medium
CVE-2021-4377
Doneren met Mollie <= 2.8.4 - Information Disclosure
High
5294af95-e85f-4425-9c4b-0a92dfac4bd1
Digital Climate Strike WP <= 1.0.0 - Malicious Redirect
Medium
CVE-2021-24168
Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting
Critical
e30fe90a-774c-41ba-b28e-8b8128fd72cc
Modal Survey <= 2.0.1.8 - PHP Object Injection
Medium
CVE-2021-47984
WP24 Domain Check <= 1.6.2 - Cross-Site Scripting
High
CVE-2022-21661
WordPress Core < 5.8.3 - SQL Injection via WP_Query
Medium
0eb90948-b2b6-4e30-b903-95b7bce5d734
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
High
CVE-2021-25080
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2020-36727
Newsletter Manager <= 1.5.1 - Insecure Deserialization
High
0f87d37a-879f-4506-a651-8c965a558e28
Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2020-29171
All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting
High
CVE-2020-35773
Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.