Medium
CVE-2021-39346
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-39341
OptinMonster <= 2.6.4 - Unprotected REST-API Endpoints
Medium
CVE-2021-24751
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24908
Check & Log Email <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2021-24748
Email Before Download <= 6.7 - Admin+ SQL Injection
Medium
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Medium
CVE-2021-24768
WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24811
Shop Page WP <= 1.2.7 - Authenticated Cross-Site Scripting
High
CVE-2021-24860
BSK PDF Manager <= 3.1.1 - Admin+ SQL Injection
Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
Medium
6a906f90-fac2-43cf-8f67-99f8862dc636
Ibtana - Ecommerce Product Addons <= 0.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24822
Stylish Cost Calculator <= 7.0.3 - Stored Cross-Site Scripting
High
CVE-2021-24755
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection
Medium
CVE-2021-24918
Smash Balloon Social Post Feed <= 4.0 - Arbitrary Plugin Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-23174
Download Monitor <= 4.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-31567
Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2021-36920
Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-3900
Cross-Site Request Forgery in firefly-iii
Low
CVE-2021-3901
Cross-Site Request Forgery in firefly-iii
Medium
CVE-2020-22864
Cross site scripting in froala-editor
Critical
CVE-2021-41194
Improper Access Control in jupyterhub-firstuseauthenticator
Medium
CVE-2021-24749
URL Shortify <= 1.5.0 - Cross-Site Request Forgery
Medium
6e53e70f-45fc-41a6-8436-a8b14f7685d0
Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
40488ed8-ab4c-4ba6-821e-ed6d7a63e260
Hotel Listings < 1.3.3 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.