Medium
CVE-2021-24614
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
603846de-5d3b-498f-844b-306d80df80da
Two Factor Authentication (2FA , MFA, OTP SMS and Email) <= 1.0.7 - Cross-Site Scripting
Medium
0e430180-5b89-4d06-b729-d0fdbefa8185
MWB Point of Sale (POS) for WooCommerce <= 1.0.0 - Missing Authorization
Medium
CVE-2021-24435
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
Medium
d8461a10-44e1-437a-ad6c-7107aeb66124
WordPress Affiliates Plugin — SliceWP Affiliates <= 1.0.45 - Cross-Site Scripting
Medium
be44a7e0-f0e0-4e2e-ac1e-0550d8e5d994
SpeakOut! Email Petitions <= 2.13.1.1 - Cross-Site Scripting
High
b0d8499a-a630-4c2b-9381-78ac83da119d
WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery
Medium
a0b14d91-f8f9-41df-b2eb-12792fb3a197
Tutor LMS <= 1.9.5 - Cross-Site Scripting
Medium
CVE-2021-24601
WPFront Notification Bar <= 2.0.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24568
AddToAny Share Buttons <= 1.7.45 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24522
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Medium
CVE-2021-24611
Keyword Meta <= 3.0 - Cross-Site Scripting
Medium
3ca760ea-e062-413e-ac92-520922129937
Form Builder | Create Responsive Contact Forms <= 1.9.8.4 - Cross-Site Scripting
Medium
CVE-2021-24603
Site Reviews <= 5.13.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24513
Form Builder <= 1.9.8.3 - Authenticated Stored Cross-Site Scripting
Medium
255f0fc4-5023-4039-9418-2f28363dbfc4
Migration, Backup, Staging – WPvivid <= 0.9.55 - Reflected Cross-Site Scripting
Medium
CVE-2021-24517
Stop Spammers Security <= 2021.17 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
1a91e973-f669-49a6-8c74-f6fbc4dc8db9
Clean Login 1.12.6.3 - Cross-Site Scripting
Medium
CVE-2021-34661
WP Fusion Lite <= 3.37.18 – Cross-Site Request Forgery to Data Deletion
Medium
CVE-2021-4375
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
High
CVE-2021-24727
WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.60 - Authenticated SQL Injection
Medium
CVE-2013-7482
ReFlex Gallery < 1.4.3 - Cross-Site Scripting
High
CVE-2021-24726
WP Simple Booking Calendar <= 2.0.6 - Authenticated SQL Injection
Medium
89614950-8517-4765-886a-1aa30a2f052e
Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.