High
CVE-2021-3116
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-3124
Custom Global Variables <= 1.0.5 - Stored Cross-Site Scripting via 'name'
Critical
CVE-2020-29045
Five Star Restaurant Menu <= 2.2.0 - Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
Critical
03be4344-d388-4357-8a2e-c3b9c8b83017
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
Medium
234a847b-3ffa-4c5c-9bba-39df227de0bc
Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting
Critical
CVE-2020-28468
pwntools Server-Side Template Injection (SSTI) vulnerability
Critical
e30fe90a-774c-41ba-b28e-8b8128fd72cc
Modal Survey <= 2.0.1.8 - PHP Object Injection
High
d0215e53-0394-4845-93e4-463cd5642fb3
Modal Survey < 2.0.1.8.2 - Authorization Bypass
High
Exploited in attacks
CVE-2020-17519
Path Traversal in Apache Flink
Medium
CVE-2024-21911
Cross-site scripting vulnerability in TinyMCE
Low
ghsa-h96f-fc7c-9r55
Regex denial of service vulnerability in codesample plugin
High
CVE-2021-21236
Regular Expression Denial of Service in CairoSVG
Critical
CVE-2020-26759
Arbitrary code execution in clickhouse-driver
Medium
CVE-2021-47984
WP24 Domain Check <= 1.6.2 - Cross-Site Scripting
High
CVE-2022-21661
WordPress Core < 5.8.3 - SQL Injection via WP_Query
High
CVE-2020-36176
iThemes Security <= 7.6.1 - Broken Password Mechanism
Medium
0eb90948-b2b6-4e30-b903-95b7bce5d734
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
High
CVE-2021-21234
Directory Traversal in spring-boot-actuator-logview
Medium
edecb27b-ff11-4186-b8a8-41a85e3e2023
Accept Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-4222
WP Paginate <= 2.1.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-25080
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2020-28168
Axios vulnerable to Server-Side Request Forgery
Low
CVE-2020-26293
XSS in HtmlSanitizer
High
CVE-2021-24125
Contact Form Submissions <= 1.7 - Authenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.