Medium
CVE-2021-4424
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24503
Popular Brand Icons - Simple Icons <= 2.7.7 - Authenticated Cross-Site Scripting
Medium
CVE-2021-4411
WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass
High
CVE-2021-24430
Speed Booster Pack PageSpeed Optimization Suite <= 4.1.9. - Authenticated (Admin+) Remote Code Execution
High
8429148b-e28e-4bb3-bd18-390216b74dc4
Request for Quote < 1.3 - Cross-Site Request Forgery
High
75e5e1eb-300f-4ddf-aec5-4fae9dba0f5d
Unlimited Category slider for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-24498
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting
Medium
CVE-2021-4398
Amministrazione Trasparente <= 7.1 - Cross-Site Request Forgery Bypass
Medium
55c586a0-bb91-4702-a9f2-d7503f247da3
Magic Post Thumbnail <= 3.3.6 - Reflected Cross-Site Scripting
High
53409aeb-67a6-4a44-993a-fb23f8fb1344
WooCommerce Extra Cost <= 2.6 - Cross-Site Request Forgery
Medium
4f2eccc6-8e66-4235-aec3-9948b8753bf6
TNIT Filter Gallery Plugin <= 0.0.6 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
4d265120-992b-4138-b77a-1cf529e4d742
Haxcan <= 1.0.0 - Authenticated (Admin+) Path Traversal to Arbitrary File Read
Medium
CVE-2021-4395
Abandoned Cart Recovery for WooCommerce <= 1.0.4 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4394
Locations <= 3.2.1 - Cross-Site Request Forgery Bypass
High
3d0a709e-1514-43dd-8719-e9bdfdc610d2
NMI Gateway For WooCommerce <= 1.6.11 - Cross-Site Request Forgery
Medium
29b4c20b-486c-45d4-904f-561d6624d477
CRM: Contact Management Simplified – UkuuPeople <= 1.6.3 - Cross-Site Request Forgery to Favorite Addition/Deletion
High
28c3b377-4cab-4c17-adc3-6ce8b600b20a
Woo MerchantX <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2021-36872
WordPress Popular Posts <= 5.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24505
Forms <= 1.12.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-34627
WP Upload Restriction <= 2.2.4 - Missing Authorization Checks
Medium
CVE-2021-34626
WP Upload Restriction <= 2.2.4 - Missing Authorization Checks
Medium
CVE-2021-24496
Community Events <= 1.4.7 - Reflected Cross-Site Scripting
High
CVE-2021-24500
Workreap < 2.2.2 - Cross-Site Request Forgery
Critical
CVE-2021-24499
Workreap - Freelance Marketplace and Directory WordPress Theme < 2.2.2 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.