High
CVE-2021-24465
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
f4e8ad18-fa25-414c-8a94-9ad9bd3c2e31
XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Medium
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
High
CVE-2021-38312
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
Medium
1f38aca5-0d69-421e-a3f2-d12cd593a88a
Easy Social Icons <= 3.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Medium
afd67c36-31ec-4e44-bad5-a018834ccfbc
qTranslate X <= 3.4.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
8a95633f-b5e1-4a92-b566-90fb05a289ce
Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-4353
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
Medium
23132298-f1de-4085-a76f-f007b8b7de15
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Medium
CVE-2021-24569
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Medium
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Medium
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Medium
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Medium
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Medium
57be47e2-9aac-42bd-af6a-5060d2f86449
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Medium
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Medium
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24633
Countdown Block <= 1.1.1 - Missing Authorization
Medium
001e066f-6add-4426-8cd7-32229a9188d1
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24681
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.