Critical
CVE-2021-24228
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 93
Reset filters
High
CVE-2021-24231
Patreon WordPress <= 1.6.9 - Cross-Site Request Forgery
High
CVE-2021-24227
Patreon WordPress < 1.7.0 - Local File Disclosure
Medium
5287cf42-6d0a-4fd2-943d-e8e44fc08576
Jetpack <= 7.9 - Stored Cross-Site Scripting
Medium
5083509e-84e4-4bd3-9023-b458312b1886
Jetpack < 7.0.1 - Cross-Site Scripting
Medium
d703abc2-3269-42b2-a75c-d163df62260d
Jetpack <= 6.4.2 - Cross-Site Scripting via post_meta
Medium
CVE-2018-20966
Booster for WooCommerce <= 3.7.0 - Cross-Site Scripting
Critical
f71f2096-e4c9-406a-a4e5-0006b380fbaa
VaultPress <=1.9 - Remote Code Execution
Critical
fc6dcf93-7f1f-4e87-8ba5-852d23b1f0fd
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Critical
f4703ca7-0677-4128-b9b7-31132ff1804d
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - CSV Injection
Medium
35293a82-b535-47a2-8a34-e54fe836ca89
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10706
Jetpack <= 4.0.2 - Cross-Site Scripting
High
f321b8f6-0712-4932-b861-b208debb368f
VaultPress <= 1.8.6 - Remote Code Execution
Medium
CVE-2016-10705
Jetpack <= 4.0.3 - Cross-Site Scripting
Medium
9b86a259-b102-411a-8d4c-c131737b90d8
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Sensitive Information Disclosure
Medium
0691cff0-86ed-47d3-9492-5ebc930d3eb7
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Cross-Site Scripting via LaTeX markup within HTML elements
High
a1c731b9-8862-4140-b5e8-58132113e22c
Jetpack <= 3.7.1 - Stored Cross-Site Scripting
Medium
72094f97-c1cc-48df-9c88-1352e6d6e67e
Jetpack <= 3.7.1 - Information disclosure
High
d8616189-5ab8-4db0-ab9e-768cc738aeb6
Jetpack <= 3.5.2 - Cross-Site Scripting
Medium
CVE-2015-9359
Jetpack <= 3.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2014-0173
Jetpack < 2.9.3 - Security Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.