High
ea4e9263-36f7-490c-9dad-d3b806bcfdf4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-24195
Login as User or Customer < 1.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
CVE-2021-24194
Limit Login Attempts (Spam Protection) <= 2.8 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
c873d838-58e8-4f69-bccb-6d1de8d91877
Login as User or Customer <= 2.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
CVE-2021-24188
WP Copy Protection & No Right Click <= 3.1.4 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
CVE-2021-24192
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
b4d33e69-3620-42d9-adb3-267a5ed02a58
WP Maintenance Mode & Site Under Construction <= 1.8.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
CVE-2021-24189
Captchinoo Captcha <= 2.3 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
CVE-2021-24191
WP Maintenance Mode & Site Under Construction < 1.8.2 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
7d525c50-5911-4be6-a860-b48db619adba
Limit Login Attempts (Spam Protection) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
70c144c9-2d96-404d-bcca-707519c9b71c
WP Content Copy Protection & No Right Click <= 3.3 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
5658f62b-2f4a-46f7-b229-8e239c7ef148
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
CVE-2021-24190
WooCommerce Conditional Marketing Mailer <= 1.5.1 - Improper Authorization
High
CVE-2021-24193
Visitor Traffic Real Time Statistics <= 2.11 - Missing Authorization to Arbitrary Plugin Installation/Activation
High
245f8eec-d496-4298-800d-ea1120640e2d
Captchinoo, admin login page protection with Google recaptcha <= 2.4 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
High
22713937-d834-46cf-83ec-6f9f61b548e3
Conditional Marketing Mailer for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
Medium
21a1a6c2-0eb1-4ee3-abf0-76b84adca01b
iThemes Security < 7.9.1 and iThemes Security Pro < 6.8.4 - Hidden Login Bypass
Critical
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
High
CVE-2018-8292
.NET Core Information Disclosure
Medium
CVE-2020-13672
Drupal core - SA-CORE-2021-002
Medium
CVE-2021-24283
Accordion <= 2.2.29 - Reflected Cross-Site Scripting
Medium
CVE-2021-24277
RSS for Yandex Turbo <= 1.29 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24323
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2020-1747
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method o
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.