Medium
CVE-2021-4397
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24409
Prismatic <= 2.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-24434
Glass <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
3eab1e93-ecf1-4ac6-95b0-9a58c2de867a
Cooked <= 1.7.9 - Reflected Cross-Site Scripting
High
CVE-2021-24441
Sign-up Sheets <= 1.0.13 - Authenticated CSV Injection
Medium
CVE-2021-4391
Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4390
Contact Form 7 Style <= 3.2 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24429
Salon booking system < 6.3.1 - Stored Cross-Site Scripting
Medium
CVE-2021-4338
404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation
Medium
CVE-2021-24454
YOP Poll <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24426
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting
Medium
CVE-2021-24427
W3 Total Cache <= 2.1.2 Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-34620
WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting
Critical
CVE-2021-24385
Filebird 4.7.3 - Unauthenticated SQL Injection
Medium
CVE-2021-24420
Request a Quote <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24406
wpForo Forum <= 1.9.6 - Open Redirect
Medium
e9fc118e-f402-4042-85b0-2175cb0e3048
10Web Map Builder for Google Maps <= 1.0.69 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24386
WP SVG Images <= 3.3 - Authenticated (author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2021-24388
Vik Rent Car <= 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24389
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24407
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2021-34619
WooCommerce Stock Manager <= 2.5.7 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
d0586453-76ec-4ec9-9965-780af7cb31ec
Async Javascript <= 2.20.12.09 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-24405
Easy Cookies Policy <= 1.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.