High
CVE-2021-24350
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-24354
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Arbitrary Plugin Installation
High
CVE-2021-24352
Simple 301 Redirects 2.0.0 - 2.0.3 - Unauthenticated Redirect Export
Critical
30ea46c1-bb29-49b8-b161-e61f13167ff4
Gallery From Files <= 1.60 - Arbitrary File Upload
Medium
CVE-2021-24355
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Wildcard Activation and Retrieval
Medium
24f13f9a-b240-4e32-9f12-117dbe7ecac4
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
Medium
CVE-2021-24424
WP Reset <= 1.86 - Authenticated Stored Cross-Site Scripting via extra_data Parameter
High
CVE-2021-24347
SP Project & Document Manager <= 4.21 - Authenticated Shell Upload
Medium
CVE-2021-47957
Cookie Law Bar <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24504
WP LMS – Best WordPress LMS Plugin <= 1.1.5 - Cross-Site Scripting
Medium
CVE-2021-24343
iFlyChat – WordPress Chat <= 4.6.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24342
JNews - WordPress Newspaper Magazine Blog AMP Theme < 8.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24344
Easy Preloader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24421
WP JobSearch <= 1.7.3 - Stored Cross-Site Scripting
High
CVE-2021-24340
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
High
CVE-2021-24337
Video Embed <= 1.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24336
FlightLog <= 3.0.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2021-24313
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24482
Related Posts for WordPress <= 2.0.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24335
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24562
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress < 4.21.2 - Insecure Direct Object Reference
Critical
4280654a-9eab-4541-8b82-74086d37d928
CM Registration Pro <= 3.2.0 - PHP Object Injection
Medium
CVE-2021-24334
Instant Images – One Click Unsplash, Pixabay and Pexels Uploads <= 4.4.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24330
Funnel Builder by CartFlows <= 1.6.12 - Authenticated Stored Cross-Site scripting via FB Pixel ID and Google Analytics ID
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.