High
CVE-2021-25082
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-25075
Duplicate Page or Post <= 1.5.0 - Missing Authorization to Stored Cross-Site Scripting
High
452e9acc-4029-4f43-9941-c1aa2a413e34
Lean WP <= 1.4.0 - Cross-Site Request Forgery
High
CVE-2022-0255
Database Backup for WordPress <= 2.5 - Admin+ SQL Injection
Medium
CVE-2022-0288
Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting
High
3624708c-b0da-4177-a8e8-cf5f5c432f97
WP Debugging <= 2.11.7 - Cross-Site Request Forgery
High
CVE-2022-0228
Popup Builder <= 4.0.6 - Authenticated SQL Injection via order & orderby Parameters
High
CVE-2021-24862
RegistrationMagic <= 5.0.1.5 - SQL Injection
High
CVE-2022-0199
Coming soon and Maintenance mode <= 3.6.7 - Cross-Site request Forgery to Arbitrary Email Send
Medium
CVE-2022-0402
Super Forms - Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2022-0320
Essential Addons for Elementor <= 5.0.4 - Local File Inclusion
High
CVE-2021-25069
WordPress Download Manager <= 3.2.33 - Authenticated SQL Injection
High
CVE-2022-0134
AnyComment <= 0.2.17 - Cross-Site Request Forgery
Medium
CVE-2022-0234
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
Medium
CVE-2022-0279
AnyComment <= 0.2.17 - Race Condition
Medium
CVE-2022-0211
Shield Security <= 13.0.5 - Admin+ Stored Cross-Site Scripting
High
0c06d868-ac71-401a-9b8e-ee04a099c095
Support Board <= 3.4.1 - Authenticated SQL Injection
High
CVE-2022-0218
WP HTML Mail <= 3.0.9 - Missing Authorization on Rest Route
Medium
CVE-2021-25099
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
High
CVE-2022-29454
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
High
df015a51-7eb8-4fbc-839f-bcf6b2e2b1a7
AccessPress Social Icons 1.8.2 - Backdoor
Medium
CVE-2021-25060
Five Star Business Profile and Schema <= 2.1.6 - Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
Medium
CVE-2022-0186
Image Photo Gallery Final Tiles Grid <= 3.5.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-25100
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.