High
CVE-2021-24394
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-24390
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24566
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
Medium
CVE-2021-34629
SendGrid <= 1.11.8 - Authorization Bypass
High
f8aa8dd6-abff-4c37-98d5-39a924b15651
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-34631
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24529
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24533
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-4452
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24531
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
High
fc62adbf-1f04-46b2-9ae9-aac3dbce8759
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24547
KN Fix Your Title <= 1.0.1 - Stored Cross-Site Scripting
Medium
5653f1aa-06da-4208-afa2-19ef31b8be2f
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
High
CVE-2021-24602
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Medium
0efff314-b14f-4af4-b225-ba7e41d01b2e
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
fd12ce4a-585d-4e26-88fb-1ab9dcc8727d
RestroPress <= 2.8.3 - Missing Authorization
Medium
CVE-2021-24535
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-24380
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Medium
CVE-2021-24540
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24466
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24536
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.