High
469a702f-033a-40de-b725-b0ad4f8e92e8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-4446
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
Medium
01e1b22f-9622-433f-bada-23d118dc3800
Simple Admin Language Change <= 2.0.1 - Authorization Bypass
Medium
CVE-2021-24296
WP Customer Reviews <= 3.5.5 - Authenticated Stored Cross-Site Scripting
Medium
a0aa2a10-da05-41e4-bbfa-938341919b5d
Easy Digital Downloads <= 2.10.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24301
Hotjar Connecticator <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24297
Goto - Tour & Travel WordPress Theme < 2.1 - Reflected Cross-Site Scripting
Medium
bd4a1fd2-8831-482d-8ae3-fb78c2657b86
WP DoNotTrack <= 0.8.8 - Authenticated (Admin+) Stored Cross-Site Scripting
High
7a94229a-6316-48e7-bcaa-23cb2cc047b4
Activity Log 2.3.5 - 2.6.1 - SQL Injection
Low
CVE-2021-24419
WP YouTube Lyte <= 1.7.15 - Authenticated (Admin+) Cross-Site Scripting
High
ed40b874-68e2-49f3-95b0-653600394e78
WordPress Download Manager < 3.1.19 - Arbitrary File Upload
Medium
CVE-2021-24315
GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting
Medium
6d700580-1374-4a17-a6b3-59ba1d063030
WordPress Download Manager < 3.1.23 - Arbitrary Asset Manager Usage
High
4ccc8f3b-9028-45db-8db2-574736fe3ccb
WordPress Download Manager < 3.1.22 - Cross-Site Request Forgery
Medium
daedec14-6177-43c7-89d4-a39c13d94ca4
LMS by LifterLMS <= 4.21.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24288
AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect
Critical
CVE-2021-4434
Social Warfare <= 3.5.2 - Remote Code Execution
Medium
CVE-2021-31157
WPGraphQL <= 1.3.5 - Denial of Service
Medium
CVE-2021-20714
WP Fastest Cache <= 0.9.1.6 - Authenticated (Admin+) Directory Traversal to Arbitrary File Deletion
Medium
CVE-2021-24290
Store Locator Plus <= 5.12.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24292
Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting
Critical
CVE-2021-24285
Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection
Critical
CVE-2021-24314
Goto - Tour & Travel WordPress Theme < 2.1 - SQL Injection
High
CVE-2021-24289
Store Locator Plus <= 5.5.15 - Authenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.