Medium
CVE-2021-24595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24617
GamePress – The Game Database Plugin <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-34650
eID Easy <= 4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-39327
BulletProof Security <= 5.1 - Sensitive Information Disclosure
High
8fa97e67-08c1-4553-bada-e4c59f797207
Buddyboss Platform <= 1.7.8 - SQL Injection
Medium
CVE-2021-36841
YITH Maintenance Mode <= 1.3.7 - Stored Cross-Site Scripting
Medium
CVE-2021-24732
PDF Flipbook, 3D Flipbook WordPress – DearFlip Lite <= 1.7.12 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24677
Find My Blocks < 3.4.0 - Sensitive Information Disclosure
Medium
CVE-2021-24743
Podcast Subscribe Buttons < 1.4.2 - Stored Cross-Site Scripting
Medium
9de09daa-a3e0-4563-bdc9-79cb5e4b039b
SEO Redirection Plugin – 301 Redirect Manager <= 7.8 - Cross-Site Request Forgery
Medium
CVE-2021-24734
Compact WP Audio Player <= 1.9.6 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24516
PlanSo Forms <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24684
PDF Light Viewer <= 1.4.11 - Authenticated Command Injection
Medium
CVE-2021-24736
Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.56 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24735
Compact WP Audio Player <= 1.9.6 - Setting Change via Cross-Site Request Forgery
Medium
CVE-2021-20792
Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting
Medium
CVE-2021-24656
Simple Social Media Share Buttons <= 3.2.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24651
Poll Maker < 3.4.2 - Unauthenticated SQL Injection
Medium
CVE-2021-4379
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Medium
CVE-2021-4376
WooCommerce Multi Currency <= 2.1.17 - Missing Authorization
Critical
CVE-2021-47940
Download from files <= 1.48 - Arbitrary File Upload
Medium
CVE-2021-24577
Coming soon and Maintenance mode <= 3.5.2 - Authenticated Stored Cross-Site Scripting
Medium
b13f1fb2-5dbc-4d7d-b4cc-b6dc6804531a
SEO Redirection Plugin – 301 Redirect Manager <= 7.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24737
Comments - wpDiscuz <= 7.3.0 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.