Medium
CVE-2021-24494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-24456
Quiz Maker <= 6.2.0.8 - SQL Injection
Medium
06d374b0-a4a6-4f0e-af85-66b3a50b1354
Portfolio Responsive Gallery <= 1.1.7 - Cross-Site Scripting
Low
CVE-2021-24371
RSVPMaker <= 8.7.2 - Server-Side Request Forgery
High
CVE-2021-24483
Poll Maker <= 3.2.0 - SQL Injection
Critical
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Critical
CVE-2021-34624
ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload
Medium
CVE-2021-24479
DrawBlog <= 0.90 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24452
W3 Total Cache <= 2.1.4 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24477
Migrate Users <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24436
W3 Total Cache <= 2.1.3 - Reflected Cross-Site Scripting via extension
Medium
CVE-2021-24476
Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24480
Event Geek <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-24472
QT KenthaRadio < 2.0.2 & OnAir2 < 3.9.9.2 - Server-Side Request Forgery & Remote File Inclusion
Medium
CVE-2021-24464
YouTube Embed, Playlist and Popup <= 2.3.8 - Contributor+ Stored Cross-Site Scripting
Critical
CVE-2021-34621
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24455
Tutor LMS <= 1.9.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-4399
Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24470
Yada Wiki <= 3.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24478
Bookshelf <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24521
Side Menu Lite <= 2.2 - SQL Injection
Critical
CVE-2021-34623
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24488
Post Grid <= 2.1.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.