High
CVE-2021-24398
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-24401
WP Domain Redirect <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24618
Donate With QRCode <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
97c441c3-ae8b-4b7a-8480-da81c0f339ab
Donate With QRCode <= 1.4.5 - Cross-Site Request Forgery to Settings Update
High
CVE-2021-24636
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin <= 3.4.1 - Cross-Site Request Forgery
Medium
CVE-2021-24582
ThinkTwit < 1.7.1 - Stored Cross-Site Scripting
High
CVE-2021-34645
Shopping Cart & eCommerce Store <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
a401db3e-2cf2-4283-bfbe-d4a9587966e1
Jock on air now <= 5.6.1 - Reflected Cross-Site Scripting
High
9cf12dc1-7b66-4c6e-8c3e-5915e1032303
Jock on air now <= 5.6.2 - Unauthenticated Stored Cross-Site Scripting
Medium
898ba68f-2b0c-462a-87ee-272ee624396e
Jock on air now <= 5.6.1 - Cross-Site Request Forgery to Settings Update
High
87b26fcf-d0b3-4ab3-92d8-8f1ba72af0a3
BuddyPress <= 9.0.0 - Information Disclosure via REST API
Critical
40765cfe-a60a-44dc-8cdb-f9c8e42654c3
BuddyPress <= 9.0.0 - SQL Injection
Medium
CVE-2021-24640
WordPress Slider Block Gutenslider <= 5.1.5 - Cross-Site Scripting
Medium
CVE-2021-24635
Visual Link Preview <= 2.2.2 - Unauthorised AJAX Calls
Critical
CVE-2021-24493
Shopp <= 1.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2021-24510
MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-36832
Icegram <= 2.0.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24652
PostX - Gutenberg Blocks for Post Grid <= 2.4.9 - Unauthorized Access Controls
High
CVE-2021-24491
Fileviewer <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2021-38315
SP Project & Document Manager <= 4.25 - Reflected Cross-Site Scripting
Medium
CVE-2021-34641
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24623
WordPress Advanced Ticket System, Elite Support Helpdesk <= 1.0.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-4423
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass
Medium
e298663b-746c-40fc-a2ca-cb35d472baab
Amazon Auto Links <= 4.6.19 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.