Medium
CVE-2021-25004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-0149
WooCommerce – Store Exporter <= 2.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-25077
Store Toolkit for WooCommerce <= 2.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-21670
markdown-it < 1.3.2 - Uncontrolled Resource Consumption
Critical
CVE-2021-25114
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
Medium
CVE-2021-24993
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
High
CVE-2021-24947
RVM - Responsive Vector Maps <= 6.4.1 - Subscriber+ Arbitrary File Read
High
CVE-2022-21662
WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting
High
CVE-2021-25108
IP2Location Country Blocker <= 2.26.5 - Arbitrary Country Ban via Cross-Site Request Forgery
Medium
CVE-2022-21663
WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection
High
CVE-2021-25095
IP2Location Country Blocker <= 2.26.4 - Subscriber+ Arbitrary Country Ban
Medium
CVE-2022-23979
Ultimate Reviews <= 3.0.15 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-25096
IP2Location Country Blocker <= 2.26.4 - Ban Bypass
High
CVE-2022-21664
WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query
Medium
CVE-2022-23179
Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24839
SupportCandy <= 2.2.4 - Unauthenticated Arbitrary Ticket Deletion
Medium
CVE-2021-25106
Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-24928
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
Medium
CVE-2021-24878
SupportCandy <= 2.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24879
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2022-24663
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode
Medium
CVE-2021-24880
SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode
Medium
CVE-2021-24843
SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
Medium
CVE-2021-25084
Advanced Cron Manager <= 2.4.1 - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.