Medium
CVE-2021-24319
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24318
Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Insecure Direct Object Reference
Medium
CVE-2021-24316
Mediumish <= 1.0.60 - Reflected Cross-Site Scripting
Medium
CVE-2021-24322
Database Backup for WordPress <= 2.3.3 - Authenticated Stored Cross-Site Scripting via backup_receipient Parameter
Critical
CVE-2021-24321
Bello - Directory & Listing <= 1.5.9 - Unauthenticated SQL Injection
Medium
88fdd087-4bce-4ead-bc78-c6bdbaa70d9c
WooCommerce Amazon Pay 2.0.0 - Reflected Cross-Site Scripting
High
CVE-2021-24312
WP Super Cache <= 1.7.2 - Authenticated Remote Code Execution
High
CVE-2021-24777
Hotscot Contact Form < 1.3 - SQL Injection
High
CVE-2021-24311
External Media <= 1.0.33 - Authenticated Arbitrary File Upload
High
CVE-2021-24778
Tradetracker-Store < 4.6.60 - Authenticated SQL Injection
Medium
CVE-2021-24309
Weekly Schedule <= 3.4.2 - Stored Cross-Site Scripting
Medium
CVE-2021-24310
Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title
Medium
CVE-2021-24308
LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin <= 4.21.0 - Stored Cross-Site Scripting
High
CVE-2021-24307
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Medium
CVE-2021-24298
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
High
CVE-2021-24299
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
Medium
CVE-2021-24423
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
High
d99614e6-4543-4594-9a46-71ecc986be45
Wishlist and Compare for WooCommerce <= 1.0.4 - Authorization Bypass
Medium
CVE-2021-24306
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Medium
CVE-2021-24332
Autoptimize <= 2.8.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24294
DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting
Medium
5b05e973-c0ab-492f-8b51-e7c2f33475ad
leads5050-visitor-insights < 1.0.4 - Unauthenticated Arbitrary License Change
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
High
CVE-2021-4444
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.