High
8459c436-0c4d-40e6-a30d-94b8ac50df83
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
6c3032ae-eb86-47d0-b160-320a67a380e1
WooCommerce Reviews Plugin with Multi-criteria Rating by ReviewX < 1.2.9 - Cross-Site Request Forgery
High
391e12f7-9521-4ac6-bd78-ac28df72030b
BNG Gateway For WooCommerce <= 1.6.10 - Cross-Site Request Forgery
Medium
CVE-2021-24448
Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2021-24444
TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting
High
220055ff-683c-47a4-8817-b3e70bb9dc81
Adapta RGPD <= 1.3.2 - Cross-Site Request Forgery
Medium
CVE-2021-3135
Newspaper Lite < 11.0 - Reflected Cross-Site Scripting
Medium
1f2d149b-fe63-4fa3-b840-02dc8c5f9323
Food Store < 1.3.7 - Cross-Site Request Forgery
High
190edd82-840d-4468-8f5a-127cce049336
YITH Request a Quote for WooCommerce <= 1.6.3 - Cross-Site Request Forgery
High
12849d7e-1685-4e03-be0c-0672545fcd2b
Express Shop <= 4.0.2 - Cross-Site Request Forgery
High
0f70e1b6-2963-43f6-b60f-65830d030d79
Global Multisite Search <= 1.0.1 - Cross-Site Request Forgery
High
0bb43b6c-4f14-401c-9964-1c4c19fc9e51
Title Field Validation <= 1.1 - Cross-Site Request Forgery
High
09768e37-7ba8-43b6-93df-3d201fe780ba
Woostify <= 1.9.1 - Cross-Site Request Forgery
High
00f5812d-661e-4206-8c3d-127bc3d48961
Woocommerce Tabs Plugin, Add Custom Product Tabs <= 1.0.1 - Cross-Site Request Forgery
Critical
CVE-2021-23399
Arbitrary Command Injection
High
CVE-2021-33503
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Critical
CVE-2021-32708
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
Medium
CVE-2021-32720
List of order ids, number, items total and token value exposed for unauthorized uses via new API
High
CVE-2021-24459
Survey Maker < 1.5.6 - Authenticated SQL Injection
High
CVE-2021-24458
Popup box < 2.3.4 - Authenticated SQL Injection
High
CVE-2021-24492
Handsome Testimonials & Reviews < 2.1.1 - Authenticated SQL Injection
High
CVE-2021-24461
FAQ Builder AYS <= 1.3.5 - Blind SQL Injection
High
CVE-2021-24484
Secure Copy Content Protection and Content Locking <= 2.6.6 - SQL Injection
Medium
b2594fcc-ae07-4f3f-a4fe-0c19524b0193
Survey Maker – Best WordPress Survey Plugin <= 1.5.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.