High
CVE-2021-24669
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24798
WP Header Images <= 2.0.0 - Reflected Cross-Site Scripting
High
2657aa8a-b2de-4cb4-b9f8-e7fb0c887a7a
WooCommerce Affiliate Plugin – Coupon Affiliates < 4.11.3.4 - Cross-Site Request Forgery
Medium
202a8724-14da-4edb-870e-2fee205b1d53
Vision Interactive For WordPress <= 1.5.1 - Reflected Cross-Site Scripting
Medium
1d68ea19-9592-483a-a5fd-635819f9b863
Easy Custom JS And CSS <= 1.1.2 - Reflected Cross-Site Scripting
Medium
112564b7-bf3c-4c17-8113-e05ab75edf6a
ImageLinks Interactive Image Builder <= 1.5.2 - Reflected Cross-Site Scripting
Critical
CVE-2021-24827
Asgaros Forum <= 1.15.12 - Unauthenticated SQL Injection
High
CVE-2021-24647
Pie Register <= 3.7.1.5 - Authentication Bypass
High
CVE-2021-24791
Header Footer Code Manager <= 1.1.13 - Authenticated SQL Injections
Medium
2505ffdd-d697-4c69-8f75-0bc4d09e1b1f
Inline Related Posts <= 3.0.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-36911
Comment Engine Pro <= 1.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2021-42053
Cross-site scripting in Unicorn framework
High
CVE-2021-24629
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24626
Chameleon CSS <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2021-24807
Support Board <= 3.3.4 - Agent+ Stored Cross-Site Scripting
High
CVE-2021-24628
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24627
G Auto-Hyperlink <= 1.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24630
Schreikasten <= 0.14.18 - Authenticated (Author+) SQL Injection
High
CVE-2021-24631
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24625
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-39317
AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2021-41125
Scrapy HTTP authentication credentials potentially leaked to target websites
High
CVE-2021-41121
Memory corruption when returning a literal struct with a private call inside of it
High
CVE-2021-41120
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.