High
CVE-2021-24146
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2020-26272
IPC messages delivered to the wrong frame in Electron
Critical
CVE-2021-4381
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
Critical
CVE-2021-24884
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting
Medium
ec0fff2a-602d-441b-89d1-64d609a4abc0
Popup Builder <= 3.72 Missing Authorization on AJAX actions
Critical
CVE-2021-4370
uListing <= 1.6.6 - Missing Authorization
Critical
CVE-2021-4357
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
Critical
575d1353-70af-4200-9088-662f7a052b76
Super Forms – Drag & Drop Form Builder <= 4.9.700 - Arbitrary File Upload
Medium
CVE-2021-4345
uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Critical
CVE-2021-4346
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Critical
CVE-2021-4343
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
Critical
CVE-2021-4341
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
High
CVE-2021-4339
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Unrated
drupal-contrib-2021-003
drupal/subgroup - SA-CONTRIB-2021-003
Critical
CVE-2021-3120
YITH WooCommerce Gift Cards Premium <= 3.3.0 - Arbitrary File Upload
High
CVE-2021-24144
Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection
Medium
CVE-2021-4377
Doneren met Mollie <= 2.8.4 - Information Disclosure
Medium
CVE-2021-21239
Improper Verification of Cryptographic Signature in PySAML2
Medium
CVE-2021-21238
SAML XML Signature wrapping in PySAML2
High
5294af95-e85f-4425-9c4b-0a92dfac4bd1
Digital Climate Strike WP <= 1.0.0 - Malicious Redirect
Low
CVE-2020-26248
Blind SQL injection in PrestaShop productcomments module
High
CVE-2020-28482
Cross-site Request Forgery in fastify-csrf
High
CVE-2020-28477
Prototype Pollution in immer
Medium
CVE-2020-28481
CORS misconfiguration in socket.io
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.