Medium
CVE-2021-25039
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2022-0267
AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection
High
CVE-2021-24216
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-0420
RegistrationMagic <= 5.0.2.1 - SQL Injection
Medium
CVE-2021-25038
WordPress Multisite User Sync/Unsync (Premium) <= 2.1.1 Reflected Cross-Site Scripting
Medium
423627a6-623d-462c-a767-cf021566d9e1
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting
Medium
2bde5862-1b7c-4e58-b13f-c8f347593c51
IP2Location Country Blocker < 2.26.9 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-0445
WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent < 2.14.2 - Cross-Site Request Forgery
Medium
CVE-2022-0422
White Label MS <= 2.2.8 - Reflected Cross-Site Scripting
High
CVE-2020-35749
Simple Job Board <= 2.9.3 - Local File Inclusion
Medium
CVE-2022-23980
Yasr – Yet Another Stars Rating <= 2.9.9 - Cross-Site Scripting via source
Medium
d3c4b62b-c8b1-40b8-b250-d9da94208c62
EasyJobs <= 1.4.7 - Reflected Cross-Site Scripting
High
a596c9c4-ceb4-470c-8ad5-986cd62da91e
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
Critical
CVE-2022-0349
NotificationX <= 2.3.8 - Blind SQL Injection
Medium
CVE-2022-0448
CP Blocks <= 1.0.14 - Authenticated Stored Cross-Site Scripting via License ID settings
High
CVE-2021-25087
Download Manager <= 3.2.34 - Sensitive Information Disclosure
Medium
CVE-2021-24953
Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting
Medium
CVE-2021-24825
Custom Content Shortcode <= 4.0.1 - Authenticated Arbitrary File Access / Local File Inclusion
Medium
CVE-2021-24824
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Medium
CVE-2022-0389
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting
Medium
CVE-2021-24826
Custom Content Shortcode <= 4.0.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-23180
Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change
Critical
CVE-2022-0434
Page Views Count Plugin <= 2.4.14 - Unauthenticated SQL Injection
Medium
CVE-2021-25098
Easy Pricing Tables <= 3.1.2 - Arbitrary Post Removal via Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.