High
CVE-2021-24870
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-39349
Author Bio Box <= 3.3.1 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-38346
Brizy Page Builder <= 2.3.11 - Authenticated File Upload and Path Traversal
High
CVE-2021-24998
Simple JWT Login <= 3.2.1 - Insecure Password Creation
High
CVE-2021-24864
WP Cloudy <= 4.4.9 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24598
Testimonial < 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-38344
Brizy - Page Builder <= 2.3.11 - Stored Cross-Site Scripting
Medium
CVE-2021-24802
Colorful Categories < 2.0.15 - Cross-Site Request Forgery
High
CVE-2021-24867
AccessPress Anonymous Post = 2.8.0 - Backdoored
Medium
a2c9b82a-b63c-4647-a561-d567b6e9ff0a
Discounts Manager for Products <= 3.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-36826
WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24783
Post Expirator <= 2.5.1 - Contributor+ Arbitrary Post Schedule Deletion
Critical
CVE-2021-24731
Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection
Medium
CVE-2021-24806
Comments - wpDiscuz <= 7.3.3 - Arbitrary Comment Addition/Edition/Deletion by Cross-Site Request Forgery
Medium
CVE-2021-24766
404 to 301 <= 3.0.8 - Logs Deletion via Cross-Site Request Forgery
High
CVE-2021-24537
Similar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution
Medium
CVE-2021-24840
Squaretype - Modern Blog WordPress Theme < 3.0.4 - Authorization Bypass
Medium
b924261f-1e1a-4565-a22e-ba592912d270
YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24607
Storefront Footer Text <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24844
Affiliate Manager <= 2.8.6 - Admin+ SQL injection
Medium
CVE-2021-24706
Qwizcards <= 3.61 - Stored Cross-Site Scripting
Medium
CVE-2021-24664
School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting
Critical
CVE-2025-34077
Pie Register <= 3.7.1.4 - Authentication Bypass
Medium
CVE-2021-24710
Print-O-Matic <= 2.0.2 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.