Medium
9a93ecaf-582d-4689-ba1f-52731c4b1ab7
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24549
AceIDE <= 2.6.2 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2021-24556
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
High
CVE-2021-24553
Timeline Calendar <= 1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24550
Broken Link Manager <= 0.6.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-34630
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting
High
CVE-2021-24555
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24395
Embed Youtube Video <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24392
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24391
Cashtomer <= 1.0.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24393
Comment Highlighter <= 0.13 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24567
Simple Post <= 1.1 - Stored Cross-Site Scripting
High
CVE-2021-24394
Easy Testimonial Manager <= 1.2.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24390
WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 <= 3.7.2 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24566
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
Medium
CVE-2021-34629
SendGrid <= 1.11.8 - Authorization Bypass
High
f8aa8dd6-abff-4c37-98d5-39a924b15651
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-34631
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24529
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24533
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-4452
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24531
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
High
fc62adbf-1f04-46b2-9ae9-aac3dbce8759
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.