High
CVE-2021-24125
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2020-36727
Newsletter Manager <= 1.5.1 - Insecure Deserialization
High
0f87d37a-879f-4506-a651-8c965a558e28
Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2020-29172
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
Medium
CVE-2021-25117
WP-PostRatings <= 1.86 - Cross-Site Scripting
Medium
CVE-2020-29171
All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting
High
CVE-2020-35773
Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting
Medium
CVE-2021-24126
Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting
Medium
ac352bb2-f624-4c31-951a-988a0b420635
Simple Social Media Share Buttons <= 3.2.0 - Reflected Cross-Site Scripting
High
CVE-2020-35489
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
Medium
CVE-2020-36723
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
Critical
CVE-2020-36719
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Medium
724dead7-0e4a-420d-a5a3-fca578451211
Simple Social Media Share Buttons <= 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2020-35943
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2020-35942
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery
Medium
adebcf1c-bb22-4a25-b79b-b76eb3b3023f
Gutenberg Template Library & Redux Framework <= 4.1.23 - Cross-Site Request Forgery
Medium
CVE-2020-35589
Limit Login Attempts Reloaded <= 2.15.2 - Reflected Cross-Site Scripting
High
CVE-2020-36848
Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download
High
CVE-2020-35590
Limit Login Attempts Reloaded <= 2.17.3 - Login Rate Limiting Bypass
Medium
CVE-2020-29304
DirectoriesPro by SabaiApps <= 1.3.45 - Reflected Cross-Site Scripting
Medium
CVE-2020-29303
DirectoriesPro Plugin by SabaiApps <= 1.3.45 - Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
Medium
CVE-2020-14205
DiveBook <= 1.1.4 - Improper Access Control
Medium
CVE-2020-36170
Ultimate Member <= 2.1.12 - Cross-Site Scripting
Critical
CVE-2020-29047
WP Hotel Booking <= 1.10.3 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.