Critical
CVE-2021-24212
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24320
Directory & Listing < 1.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-4392
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24238
Realteo < 1.2.4 - Missing Authorization
Medium
CVE-2021-24211
WordPress Related Posts <= 3.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24210
PhastPress <= 1.110 - Open Redirect
High
CVE-2021-4448
Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization
Medium
CVE-2021-24203
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24202
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size
Medium
CVE-2021-24205
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter
Medium
CVE-2021-24201
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24206
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size
Medium
CVE-2021-24204
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag
Medium
04601634-d707-44a7-9b5f-46c4b9687469
BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite
Medium
CVE-2021-4367
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
Medium
CVE-2021-24187
SEO Redirection Plugin - 301 Redirect Manager <= 6.3 - Reflected Cross-Site Scripting
Medium
5d7bcd71-e299-47fe-a749-e72c49b8129e
BuddyPress - 7.0.0 - 7.2.0 - Insufficient Privilege De-escalation
Medium
CVE-2021-24199
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter
High
CVE-2021-24198
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Data Deletion
Medium
CVE-2021-24200
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter
High
CVE-2021-24197
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Permission Takeover
High
CVE-2021-24209
WP Super Cache <= 1.7.1 - Authenticated (Admin+) Remote Code Execution
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
High
CVE-2021-24186
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.