Medium
CVE-2021-24979
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
6338620f-925a-4226-9557-313a7f8a6b6a
WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting
Medium
CVE-2021-24895
Cybersoldier < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24995
HTML5 Responsive FAQ <= 2.8.5 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24797
Tickera <= 3.4.8.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24846
Ni WooCommerce Custom Order Status <= 1.9.6 - SQL Injection
Medium
CVE-2021-24907
Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting
High
a7e24341-b085-4412-aa7b-42712cd94f35
Simple Slider < 1.1 - Reflected Cross-Site Scripting
High
8af26db8-5cae-45ba-9573-2bc4e885de81
Kudos Donations – Easy donations and payments with Mollie < 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2015-9434
Logo Carousel < 1.7.2 - Stored Cross-Site Scripting
Medium
CVE-2021-24956
Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24738
Logo Carousel <= 3.4.1 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24739
Logo Carousel <= 3.4.1 - Unauthorised Private Post Access
High
CVE-2021-4208
ExportFeed <= 2.0.1.0 - SQL Injection
Critical
CVE-2021-24849
WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2021-24997
WP Guppy < 1.3 - Information Disclosure
Medium
CVE-2021-24941
Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id
High
CVE-2022-0889
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
High
CVE-2020-21176
SQL Injection in thinkjs
Critical
CVE-2021-41868
Remote unauthenticated attackers able to upload files in Onionshare
Medium
CVE-2020-29457
Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core
Medium
CVE-2021-39198
The disqualify lead action may be executed without CSRF token check
Critical
CVE-2021-43996
Incorrect Access Control in Ignition
Critical
CVE-2021-3918
json-schema is vulnerable to Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.