Medium
CVE-2021-24593
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24599
Email Encoder <= 2.1.1 - Reflected Cross Site Scripting
Medium
CVE-2021-24592
Sitewide Notice WP <= 2.2 - Authenticated Stored Cross-Site Scripting
Medium
47cc9978-6074-4e8a-a471-d8483890d161
StoryChief <= 1.0.30 - Authenticated Stored Cross-Site Scripting
Medium
288fdb71-1dae-4897-b5af-95c628fce288
StoryChief <= 1.0.30 - Reflected Cross-Site Scripting
Medium
CVE-2021-24588
SMS Alert Order Notifications – WooCommerce <= 3.4.6 - Cross-Site Scripting
High
CVE-2021-24579
Bold Page Builder <= 3.1.5 - PHP Object Injection
High
CVE-2021-34633
Youtube Feeder <= 2.0.1 - Cross-Site Request Forgery
High
CVE-2021-34634
Nifty Newsletters <= 4.0.23 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24600
WP Dialog <= 1.2.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24596
youForms for WordPress – Creating Forms for CopeCart <= 1.0.5 - Stored Cross-Site Scripting
Medium
CVE-2021-24597
有赏 You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24303
JiangQie Official Website Mini Program < 1.1.1 - SQL Injection
Medium
CVE-2021-24528
FluentSMTP <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24587
Splash Header < 1.20.8 - Stored Cross-Site Scripting
Medium
CVE-2021-34638
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting
High
CVE-2021-34639
WordPress Download Manager <= 3.1.24 - Authenticated File Upload
Medium
CVE-2021-24530
Alojapro Widget <= 1.1.15 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-4225
SP Project & Document Manager <= 4.23 - Subscriber+ Arbitrary File Upload
Critical
CVE-2021-36879
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Privilege Escalation
Medium
CVE-2021-36878
uListing <= 2.0.5 - Cross-Site Request Forgery leading to Settings Change
Medium
CVE-2021-36877
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2021-36876
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Cross-Site Request Forgery
Medium
CVE-2021-36875
Listing, Classified Ads & Business Directory – uListing <= 2.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.