Medium
9de09daa-a3e0-4563-bdc9-79cb5e4b039b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24734
Compact WP Audio Player <= 1.9.6 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24516
PlanSo Forms <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24684
PDF Light Viewer <= 1.4.11 - Authenticated Command Injection
Medium
CVE-2021-24736
Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.56 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24735
Compact WP Audio Player <= 1.9.6 - Setting Change via Cross-Site Request Forgery
High
CVE-2021-3666
body-parser-xml vulnerable to Prototype Pollution
High
ghsa-2rh5-jvgx-pgw3
Any storage file can be downloaded from p.sh if full server path is known
High
ghsa-gqcf-83rq-gpfr
Any storage file can be downloaded from p.sh if full server path is known
Medium
CVE-2021-40823
matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver
Critical
CVE-2021-3645
merge vulnerable to Prototype Pollution
High
CVE-2021-23440
Prototype Pollution in set-value
Critical
CVE-2021-40146
Remote Code Execution in Any23
Critical
CVE-2021-38555
XML Injection in Any23
High
CVE-2021-40839
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
Medium
CVE-2021-20792
Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting
Medium
CVE-2021-24656
Simple Social Media Share Buttons <= 3.2.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24651
Poll Maker < 3.4.2 - Unauthenticated SQL Injection
Medium
CVE-2021-4379
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Medium
CVE-2021-4376
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Critical
CVE-2021-47940
Download from files <= 1.48 - Arbitrary File Upload
Medium
CVE-2021-24577
Coming soon and Maintenance mode <= 3.5.2 - Authenticated Stored Cross-Site Scripting
Medium
b13f1fb2-5dbc-4d7d-b4cc-b6dc6804531a
SEO Redirection Plugin – 301 Redirect Manager <= 7.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24737
Comments - wpDiscuz <= 7.3.0 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.