Medium
15d9c743-5700-482a-a6bc-ecf541ea9e7d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
b6b68e35-ecfb-4876-8fee-c389077b2b4a
Zlick Paywall < 2.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24302
Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24300
PickPlugins Product Slider for WooCommerce <= 1.13.21 - Reflected Cross-Site Scripting
Medium
CVE-2021-24305
Watcheezy Live chat plugin for WordPress <= 2.0 - Stored Cross-Site Scripting
High
e27634f8-493b-4edb-a0c7-1bc8890b70f0
Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery
High
CVE-2021-4447
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
High
469a702f-033a-40de-b725-b0ad4f8e92e8
Ship To eCourier <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-4446
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
Medium
01e1b22f-9622-433f-bada-23d118dc3800
Simple Admin Language Change <= 2.0.1 - Authorization Bypass
Medium
CVE-2021-24296
WP Customer Reviews <= 3.5.5 - Authenticated Stored Cross-Site Scripting
Medium
a0aa2a10-da05-41e4-bbfa-938341919b5d
Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24301
Hotjar Connecticator <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24297
Goto - Tour & Travel WordPress Theme < 2.1 - Reflected Cross-Site Scripting
Medium
bd4a1fd2-8831-482d-8ae3-fb78c2657b86
WP DoNotTrack <= 0.8.8 - Authenticated (Admin+) Stored Cross-Site Scripting
High
7a94229a-6316-48e7-bcaa-23cb2cc047b4
Activity Log 2.3.5 - 2.6.1 - SQL Injection
Low
CVE-2021-24419
WP YouTube Lyte <= 1.7.15 - Authenticated (Admin+) Cross-Site Scripting
High
ed40b874-68e2-49f3-95b0-653600394e78
WordPress Download Manager < 3.1.19 - Arbitrary File Upload
Medium
CVE-2021-24315
GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting
Medium
6d700580-1374-4a17-a6b3-59ba1d063030
WordPress Download Manager < 3.1.23 - Arbitrary Asset Manager Usage
High
4ccc8f3b-9028-45db-8db2-574736fe3ccb
WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery
Medium
daedec14-6177-43c7-89d4-a39c13d94ca4
LMS by LifterLMS <= 4.21.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24288
AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Critical
CVE-2021-4434
Social Warfare <= 3.5.2 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.