Medium
76d850dd-75f3-4671-9561-0e361d09a121
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24590
Cookie Notice & Consent Banner for GDPR & CCPA Compliance <= 1.7.1 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-4355
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
Medium
CVE-2021-34660
WP Fusion Lite <= 3.37.18 – Reflected Cross-Site Scripting
High
CVE-2021-24728
Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection
Medium
CVE-2021-24591
Highlight < 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24609
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
High
b15b10a4-04fd-4860-9cc9-cefcdbbbf507
User Rights Access Manager <= 1.0.7 - Access Restriction Bypass
High
CVE-2021-24606
Availability Calendar < 1.2.1 - SQL Injection
Medium
58b8e6f5-5cf8-4dbb-89e9-69266bdc1a30
WP Customize Login <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24604
Availability Calendar <= 1.2.1 - Stored Cross-Site Scripting
Medium
e9222c74-7f4f-4d20-8c1e-03be125709ff
VDZ Google Analytics or Google Tag Manager < 1.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
High
e2defe79-137f-45a0-85a1-f61dce9afd28
WP LMS – Best WordPress LMS Plugin <= 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2021-24438
ShareThis Dashboard for Google Analytics <= 2.5.1 - Reflected Cross-Site Scripting via ga_action parameter
Medium
b90267c6-e6b4-4ca0-8779-c20f62016eeb
VDZ Google Analytics or Google Tag Manager / GTM <= 1.5.5 - Stored Cross-Site Scripting
Medium
CVE-2021-24593
Business Hours Indicator <= 2.3.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24599
Email Encoder <= 2.1.1 - Reflected Cross Site Scripting
Medium
CVE-2021-24592
Sitewide Notice WP <= 2.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24588
SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting
High
CVE-2021-24579
Bold Page Builder <= 3.1.5 - PHP Object Injection
High
CVE-2021-34633
Youtube Feeder <= 2.0.1 - Cross-Site Request Forgery
High
CVE-2021-34634
Nifty Newsletters <= 4.0.23 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24600
WP Dialog <= 1.2.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24596
youForms for WordPress – Creating Forms for CopeCart <= 1.0.5 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.