High
CVE-2021-24630
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24631
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24625
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-39317
AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2021-24674
Genie WP Favicon <= 0.5.2 - Cross-Site Request Forgery
Medium
CVE-2021-24608
Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24816
Phoenix Media Rename <= 3.4.2 - Author Arbitrary Media File Renaming
Medium
CVE-2021-24767
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.7.8 - Log Deletion via Cross-Site Request Forgery
Medium
CVE-2021-24708
WP All Export <= 1.3.0 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24829
Visitor Traffic Real Time Statistics <= 3.8 - Subscriber+ SQL Injection
Medium
103cbd07-4698-4b64-820d-d2df3fce95da
Age Gate <= 2.16.3 - Stored Cross-Site Scripting
Medium
CVE-2021-39351
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection via id Parameter
Medium
CVE-2021-39350
FV Flowplayer Video Player 7.5.0.727 - 7.5.2.727 - Reflected Cross-Site Scripting via player_id Parameter
Medium
CVE-2021-24646
Booking.com Banner Creator <= 1.4.2 - Cross-Site Scripting
Medium
CVE-2021-25118
Yoast SEO <= 17.2 - Full Path Disclosure
High
CVE-2021-24765
Perfect Survey <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via IP
Medium
CVE-2021-24764
Perfect Survey <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24697
Simple Download Monitor <= 3.9.4 - Reflected Cross-Site Scripting
Medium
ccd2ef23-23b7-4a32-aeda-41ea9439f166
WP-Recall <= 16.24.47 - Reflected Cross-Site Scripting
High
ccad206a-407e-4c49-9a4a-d5dce3e9612a
Two Way CHAT – Send or receive messages to your user <= 3.1.4 - Cross-Site Request Forgery
Critical
CVE-2021-24762
Perfect Survey <= 1.5.1 - Unauthenticated SQL Injection
High
9699118a-e12f-491f-b464-51129888fb1a
Two Way Chat <= 3.1.4 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-4364
JobSearch WP Job Board < = 1.8.1 - Missing Authorization on jobsearch_update_job_import_schedule_call() function
High
CVE-2021-4361
JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.