Medium
b5111eb6-b4b3-4b18-9de3-577c323eaab8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2021-4368
Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload
High
CVE-2021-4365
Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting
Medium
a95cbc9e-146a-4b6d-bfb7-9f7ea5ec394e
Wr Age Verification <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24304
Newsmag < 5.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-4359
Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion
Critical
CVE-2021-4356
Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download
Medium
CVE-2021-4351
Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change
Medium
CVE-2021-24446
Remove Footer Credit <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-4350
Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails
High
47ccda70-8c89-4e0f-a7fa-5b80515e60dc
WOWRestro – Online Ordering System For WooCommerce < 1.1 - Cross-Site Request Forgery
High
40d80e47-3411-4e70-8a20-2e698daad6e7
UpdraftPlus < 1.16.59 - Authenticated (Admin+) Local File Inclusion
High
3d5c5511-570e-4048-8c1b-68cfc831f0c6
Advanced Menu Manager <= 2.9.6 - Cross-Site Request Forgery to Menu Edition
Medium
CVE-2021-4344
Frontend File Manager <= 18.2 - Privilege Escalation
Medium
CVE-2021-24518
WPFront Notification Bar <= 1.9.2 - Authenticated Stored Cross-Site Scripting
Medium
a40944fa-9729-4d34-adc0-857bf00d6666
VDZ CallBack Plugin < 1.14.6 - Cross-Site Scripting
Critical
CVE-2021-24507
Astra Pro Addon <= 3.5.1 - Unauthenticated SQL Injection
Medium
d24c9310-5470-4d08-83b3-c801f4d25d3e
Grow Social <= 1.18.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-34625
WP Upload Restriction <= 2.2.4 – Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-24495
Marmoset Viewer < 1.9.3 - Reflected Cross-Site Scripting
High
CVE-2021-20779
WordPress Email Template Designer < 3.0.8 - Cross-Site Request Forgery
High
CVE-2021-20780
Currency Switcher <= 1.1.6 - Cross-site request forgery
Medium
CVE-2021-4427
Vuukle Comments, Reactions, Share Bar, Revenue <= 3.4.31 - Cross-Site Request Forgery Bypass
High
f9fe858e-5c89-4cc2-8b66-5c86965f7889
Travel Light <= 1.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.