Medium
CVE-2021-24374
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24367
WP Config File Editor <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24360
Yes/No Chart < 1.0.12 - Authenticated SQL Injection
Medium
CVE-2021-24351
The Plus Addons for Elementor Page Builder <= 4.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-24359
The Plus Addons for Elementor Page Builder <= 4.1.10 - Open Redirect
Medium
CVE-2021-24358
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Medium
CVE-2021-24357
FooGallery <= 2.0.34 - Stored Cross-Site Scripting
High
0d5a0c05-736f-4fb9-9358-894977664bf4
Event Calendar <= 1.1.44 - Cross-Site Scripting
Medium
CVE-2021-24366
Admin Columns Free < 4.3 and Pro < 5.5.1 Stored Cross-Site Scripting
Medium
CVE-2021-4451
NinjaFirewall <= 4.3.3 - Authenticated PHAR Deserialization
Medium
CVE-2021-24345
Sendit WP Newsletter <= 2.5.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24341
Xllentech English Islamic Calendar <= 2.6.7 - SQL Injection
High
CVE-2021-24348
Side Menu – add fixed side buttons <= 3.1.3 - SQL Injection
Medium
CVE-2021-24346
Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting
High
CVE-2021-24353
Simple 301 Redirects 2.0.0 - 2.0.3 - Unauthenticated Redirect Import
Medium
CVE-2021-24349
Gallery from files <= 1.60 - Reflected Cross-Site Scripting
High
CVE-2021-24356
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Arbitrary Plugin Activation
High
CVE-2021-24350
Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24354
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Arbitrary Plugin Installation
High
CVE-2021-24352
Simple 301 Redirects 2.0.0 - 2.0.3 - Unauthenticated Redirect Export
Critical
30ea46c1-bb29-49b8-b161-e61f13167ff4
Gallery From Files <= 1.60 - Arbitrary File Upload
Medium
CVE-2021-24355
Simple 301 Redirects 2.0.0 - 2.0.3 - Authenticated Wildcard Activation and Retrieval
Medium
24f13f9a-b240-4e32-9f12-117dbe7ecac4
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
Medium
CVE-2021-24424
WP Reset <= 1.86 - Authenticated Stored Cross-Site Scripting via extra_data Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.