Medium
CVE-2021-28170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-28128
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Medium
CVE-2021-28125
Open Redirect in Apache Superset
Medium
CVE-2021-23372
Denial of Service (DoS) in mongo-express
Medium
CVE-2021-30109
Cross-site Scripting in Froala Editor
High
CVE-2021-41126
Deleted Admin Can Sign In to Admin Interface
Medium
CVE-2020-19003
Verification check bypass in Gate One
Medium
CVE-2021-24674
Genie WP Favicon <= 0.5.2 - Cross-Site Request Forgery
Medium
CVE-2021-24608
Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24816
Phoenix Media Rename <= 3.4.2 - Author Arbitrary Media File Renaming
Medium
CVE-2021-24767
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.7.8 - Log Deletion via Cross-Site Request Forgery
Medium
CVE-2021-24708
WP All Export <= 1.3.0 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24829
Visitor Traffic Real Time Statistics <= 3.8 - Subscriber+ SQL Injection
Medium
103cbd07-4698-4b64-820d-d2df3fce95da
Age Gate <= 2.16.3 - Stored Cross-Site Scripting
Medium
CVE-2021-41122
missing clamps for decimal args in external functions
High
CVE-2021-41124
Splash authentication credentials potentially leaked to target websites
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
High
CVE-2021-41113
Cross-Site-Request-Forgery in Backend
Medium
CVE-2021-41114
HTTP Host Header Injection
High
CVE-2021-41116
Improper escaping of command arguments on Windows leading to command injection
Medium
CVE-2021-39351
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection via id Parameter
Medium
CVE-2021-39350
FV Flowplayer Video Player 7.5.0.727 - 7.5.2.727 - Reflected Cross-Site Scripting via player_id Parameter
Medium
CVE-2021-24646
Booking.com Banner Creator <= 1.4.2 - Cross-Site Scripting
Medium
CVE-2021-25118
Yoast SEO <= 17.2 - Full Path Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.