Medium
CVE-2021-24634
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
6b4087e9-071c-4cfc-b23d-ae8dd0059a2b
Live Scores for SportsPress <= 1.9.0 - Reflected Cross-Site Scripting
High
002c6fea-4b76-47a6-9a39-1195f18aa6f6
Live Scores for SportsPress <= 1.9.0 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24665
WP Video Lightbox <= 1.9.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24657
Limit Login Attempts <= 4.0.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24725
Comment Link Remove and Other Comment Tools <= 2.1.4 - Arbitrary Comment Deletion via Cross-Site Request Forgery
Critical
CVE-2021-24638
OMGF <= 4.5.3 - Unauthenticated Path Traversal in REST API
Medium
CVE-2021-24585
Timetable and Event Schedule by MotoPress <= 2.3.19 - Arbitrary User's Hashed Password/Email/Username Disclosure
Medium
CVE-2021-24724
Timetable and Event Schedule by MotoPress <= 2.3.18 - Author+ Stored Cross-Site Scripting
Medium
CVE-2021-24584
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Update
Medium
CVE-2021-24637
Google Fonts Typography <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via blockType arguments
Medium
CVE-2021-24525
WordPress Shortcodes Plugin — Shortcodes Ultimate <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24663
Simple Schools Staff Directory <= 1.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2021-24583
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Deletion
Medium
CVE-2021-24613
Post Views Counter <= 1.3.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24639
OMGF <= 4.5.3 - Subscriber+ Arbitrary File/Folder Deletion
High
CVE-2021-24402
WP iCommerce – the first interactive ecommerce for wordpress <= 1.1.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24404
WP Board <= 1.1(Beta) - Authenticated (Admin+) SQL Injection
High
CVE-2021-24396
GSEOR – WordPress SEO Plugin <= 1.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24511
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More < 3.3.1.0 - Authenticated SQL Injection via product_id Parameter
High
CVE-2021-24400
Display Users <= 2.0.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24399
The Sorter <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24397
MicroCopy <= 1.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24403
WordPress Page Contact <= 1.0 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.