Medium
CVE-2021-24924
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24914
Tawk.To Live Chat <= 0.5.4 - Missing Authorization to Visitor Monitoring & Chat Removal
Critical
CVE-2021-24931
Secure Copy Content Protection and Content Locking <= 2.8.1 - Unauthenticated SQL Injection
Medium
CVE-2021-36857
Testimonial Builder <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Medium
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
High
c70ed02e-1183-475b-a110-4a2d8dbe610e
Nitro by WooRockets <= 1.7.9 - Missing Authorization to Arbitrary Plugin Installation
Medium
c63079af-6a22-4692-ab81-96e166a00c38
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change
Medium
CVE-2022-0142
Visual Form Builder <= 3.0.5 - CSV Injection
Medium
CVE-2021-24935
WP Google Fonts <= 3.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-0140
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure
Medium
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24714
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
Medium
35b9f37c-69e1-437a-97dd-3d3e7a8cd86e
Ivory Search <= 4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24718
Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder < 1.5 - Cross-Site Scripting
Medium
CVE-2021-44777
Email Tracker <= 5.2.6 - Cross-Site Request Forgery
Medium
CVE-2021-39346
Google Maps Easy <= 1.9.33 - Stored Cross-Site Scripting
High
CVE-2021-39341
OptinMonster <= 2.6.4 - Unprotected REST-API Endpoints
Medium
CVE-2021-24751
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24908
Check & Log Email <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2021-24748
Email Before Download <= 6.7 - Admin+ SQL Injection
Medium
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Medium
CVE-2021-24768
WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24811
Shop Page WP <= 1.2.7 - Authenticated Cross-Site Scripting
High
CVE-2021-24860
BSK PDF Manager <= 3.1.1 - Admin+ SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.