Medium
CVE-2021-24547
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
5653f1aa-06da-4208-afa2-19ef31b8be2f
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
High
CVE-2021-24602
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Medium
0efff314-b14f-4af4-b225-ba7e41d01b2e
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
fd12ce4a-585d-4e26-88fb-1ab9dcc8727d
RestroPress <= 2.8.3 - Missing Authorization
Medium
CVE-2021-24535
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-24380
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Medium
CVE-2021-24540
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24466
Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24536
Custom Login Redirect <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
b7d84cb9-175f-433c-ab5c-d89621847b4d
Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG
Medium
CVE-2021-24519
VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
High
80c9f2e3-afdc-4ba2-a1ef-4c1d166d0757
RestroPress <= 2.8.2 - Cross-Site Request Forgery to Cart Manipulation
Medium
CVE-2021-34676
NEX-Forms <= 7.8.7 Authorization Bypass
High
CVE-2021-24410
తెలుగు బైబిల్ వచనములు <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2021-24527
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Medium
CVE-2021-24548
Mimetic Books <= 0.2.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24471
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24541
Wonder PDF Embed <= 1.6 - Contributor+ Stored Cross-Site Scripting
High
CVE-2020-6010
LearnPress <= 3.2.6.7 - SQL Injection
Medium
CVE-2021-24445
My Site Audit <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24411
Social Tape <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.