Medium
be0ef9d4-abb0-4801-b847-b84912bc6677
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24387
WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2021-24375
Motor – Cars, Parts, Service, Equipments and Accessories WooCommerce Store < 3.1.0 - Local File Inclusion
Medium
CVE-2021-24432
Advanced AJAX Product Filters <= 1.5.4.6 - Reflected Cross-Site Scripting
Critical
CVE-2021-24384
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection
Medium
CVE-2021-4418
Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4412
WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4410
Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4402
Multiple Roles <= 1.3.1- Cross-Site Request Forgery Bypass
High
CVE-2015-7806
Form Manager <= 1.7.2 - Authenticated Remote Command Execution
Medium
CVE-2021-24373
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-4382
Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution
Medium
CVE-2021-24379
Comments Like Dislike <= 1.1.2 - Add Like/Dislike Bypass
Medium
bb545a42-6c66-412b-a686-e486b0a58dc5
Stripe Payment Plugin for WooCommerce <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24372
WP Hardening – Fix Your WordPress Security <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24382
Smart Slider 3 <= 3.5.0.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24383
WP Google Maps <= 8.1.11 - Authenticated Stored Cross-Site Scripting
Medium
198e8f56-5354-4e5d-af51-54e95d34e25c
Recently <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24364
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
Critical
CVE-2020-24186
Comments - wpDiscuz 7.0 - 7.0.4 - Unauthenticated Arbitrary File Upload leading to Remote Code Execution
Critical
CVE-2021-24361
Location Manager < 2.1.0.10 - SQL Injection
Critical
CVE-2021-4362
Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change
Medium
CVE-2021-24368
Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting
Medium
4b468c0b-88ac-4ea8-97a9-08e206faf0fb
Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.