Medium
CVE-2024-23680
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
dd7db465-ebeb-477b-b6c8-a9b89ba2372b
MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect
Medium
a5bcf040-cc43-4b3d-a6fc-d41973725af6
WordPress Bitcoin Payments – Blockonomics <= 3.2 - Reflected Cross-Site Scripting
High
370a6130-425c-4264-baaf-8989d3b00d14
MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery
Critical
CVE-2021-24370
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload
Medium
0f01c9c8-acd4-44c0-8866-a0a819828006
All 404 Redirect to Homepage & Broken images Redirection <= 2.0 - Cross-Site Scripting
Medium
CVE-2021-24374
JetPack <= 9.7 - Information Disclosure
Medium
CVE-2021-24367
WP Config File Editor <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24360
Yes/No Chart < 1.0.12 - Authenticated SQL Injection
Medium
CVE-2021-24351
The Plus Addons for Elementor Page Builder <= 4.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-24359
The Plus Addons for Elementor Page Builder <= 4.1.10 - Open Redirect
Medium
CVE-2021-24358
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Medium
CVE-2021-24357
FooGallery <= 2.0.34 - Stored Cross-Site Scripting
High
0d5a0c05-736f-4fb9-9358-894977664bf4
Event Calendar <= 1.1.44 - Cross-Site Scripting
Medium
CVE-2021-24366
Admin Columns Free < 4.3 and Pro < 5.5.1 Stored Cross-Site Scripting
Medium
CVE-2021-4451
NinjaFirewall <= 4.3.3 - Authenticated PHAR Deserialization
Medium
CVE-2021-32640
ReDoS in Sec-Websocket-Protocol header
Medium
ghsa-5vm8-hhgr-jcjp
Cross-site scripting vulnerability in TinyMCE
High
ghsa-4g53-vp7q-gfjv
constructEvent does not verify header
Medium
CVE-2021-32643
StaticFile.fromUrl can leak presence of a directory
Low
ghsa-jcgr-9698-82jx
Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build
Medium
CVE-2020-10729
Insufficiently random values in Ansible
High
CVE-2021-32624
Private Field data leak
Medium
CVE-2021-24345
Sendit WP Newsletter <= 2.5.1 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.