Medium
eaf17a09-3e35-4df8-acb9-7829942597c6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2021-24661
PostX Gutenberg Blocks Saved Templates Addon <= 2.4.9 - Private Content Disclosure
Medium
CVE-2021-24660
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
Medium
CVE-2021-24659
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-38342
Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
Medium
df3b5124-1151-4402-b30f-038470c7a951
TS Poll – Best Poll Plugin for WordPress <= 1.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-34668
WordPress Real Media Library <= 4.14.1 - Authenticated (Author) Stored Cross-Site Scripting
Medium
c4a649b0-d5b2-4e4c-833c-01ecf12611a5
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2021-24643
WP Map Block – Gutenberg Map Block for Google Map and OpenStreet Map <= 1.2.2 - Stored Cross-Site Scripting
Medium
72d33132-aba7-4e97-90c6-359298b1c06e
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 6.61 - Reflected Cross-Site Scripting
Medium
507fe5f4-3ac3-4e48-835e-66bad8bffc88
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection < 6.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-38343
Nested Pages <= 3.1.15 - Open Redirect
Medium
1ae01053-e6cd-4ddf-9e2a-4658cdb60f8e
PHPRelativePath Library - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2021-24671
MX Time Zone Clocks <= 3.4 - Contributor+ Cross-Site Scripting
Critical
CVE-2021-34646
Booster for WooCommerce <= 5.4.3 - Authentication Bypass
Medium
CVE-2021-24632
Recipe Card Blocks by WPZOOM <= 2.8.0 - Reflected Cross-Site Scripting
High
efc434fd-320a-4808-9289-7c2f63d4f5a4
SMTP Mail <= 1.2.1 - SQL Injection
Medium
e9f090bb-8e85-4fc3-a904-0a7ff85db8f1
SMTP Mail <= 1.1.14 - Reflected Cross-Site Scripting
Critical
CVE-2021-24666
Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection
Medium
bdd0bdf3-6952-4b87-a3e8-156757d22e74
WooCommerce Affiliate Plugin – Coupon Affiliates <= 4.11.0.1 - Reflected Cross-Site Scripting
High
9821e51c-1042-47b8-b104-32f5651c31c9
TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting
Medium
926246a7-2f0d-4472-ae0a-fa3d95e5810f
Contact List – Easy Business Directory, Staff Directory and Address Book Plugin <= 2.9.41 - Reflected Cross-Site Scripting
Medium
83d46dce-b218-49ed-85ee-0e8d2a391eb9
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.