Medium
CVE-2021-33852
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 196
Reset filters
Medium
CVE-2021-33851
Customize Login Image <= 3.4 - Cross-Site Scripting
Medium
CVE-2021-24780
Single Post Exporter <= 1.1.1 - Cross-Site Request Forgery
High
CVE-2021-24763
Perfect Survey <= 1.5.2 - Cross-Site Request Forgery
Critical
CVE-2021-24693
Simple Download Monitor <= 3.9.4 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
High
CVE-2021-24655
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
Medium
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2021-24661
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
Medium
CVE-2021-24524
GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24349
Gallery from files <= 1.60 - Reflected Cross-Site Scripting
Medium
CVE-2021-24298
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24315
GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting
High
7193b373-a0c9-4cd7-8a53-4f35ceff8f23
Alkubot – Gamify discounts, sell more and give less at the right time < 3.0.0 - Cross-Site Request Forgery
Critical
CVE-2021-24229
Patreon WordPress <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24213
GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting
Medium
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
4783eff5-b7cf-4342-b762-85f745c38ec8
Font Awesome 4.0.0-rc15 and 4.0.0-rc16 - API Token Exposure
Medium
CVE-2020-20627
GiveWP <= 2.5.9 - Missing Authorization to Settings Update
High
CVE-2019-20360
GiveWP <= 2.5.4 - Authorization Bypass
Critical
CVE-2019-13578
GiveWP - Donation Plugin and Fundraising Platform <= 2.5.0 - SQL Injection
Medium
CVE-2019-15317
GiveWP <= 2.4.6 - Cross-Site Scripting
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2019-9909
GiveWP <= 2.3.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.