High
CVE-2021-24160
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24161
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24235
Goto - Tour & Travel WordPress Theme < 2.0 - Reflected Cross-Site Scripting
High
CVE-2021-24162
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Setting Modification
High
03fd0c97-7b50-4930-99ca-c9b37d7e4ade
Map Block for Google Maps <= 1.31 - Unprotected AJAX Action
High
f56a632d-4c5f-4d89-9cd9-8fc3697ff3ca
Membership by Supsystic <= 1.5.0 - Authenticated (Admin+) Time-Based Blind SQL Injection
High
e7ecd712-a7b3-40e2-b982-be8b58e9b8c3
Welcart e-Commerce <= 2.1.0 - SQL Injection
High
9a9c8c4f-ce07-4fe5-a573-ece675d51441
Pricing Table by Supsystic <= 1.8.8 - Boolean-Based Blind SQL Injections
High
931983c3-d704-4c95-8078-7db4d79e1e1c
Newsletter by Supsystic <= 1.5.6 - Authenticated (Admin+) Time-Based Blind SQL Injection
High
7934c73c-17cf-4cec-a8da-654cee453b8f
Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion
High
758e23e4-72e6-4dc1-94f9-d02b75bb9857
Ultimate Maps by Supsystic <= 1.1.16 - Authenticated SQL Injection
Medium
592b1df5-74d5-4414-aacb-7497f0f307f1
Digital Publications by Supsystic <= 1.6.12 - Stored Cross-Site Scripting
High
3d6629e9-ab43-4eca-9340-5691421ab19d
Contact Form by Supsystic <= 1.7.10 - SQL Injections
Critical
2fd58397-7598-4d98-a6b3-c5837cb3b73e
WP Armour Honeypot Anti Spam <= 1.5.6 -Cross-Site Request Forgery to Arbitrary Options Update
Medium
14c07d55-285b-4c7c-bed6-4c5224a7044a
Extra Charges To Payment Gateway For WooCommerce <= 2.0.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
121a3b46-0b31-4f28-b98e-fc06760548ae
Data Tables Generator by Supsystic <= 1.9.99 - Time-Based Blind SQL Injection
Medium
CVE-2022-1164
Wyzi - Social Directory WordPress Theme <= 2.4.2 - Reflected Cross-Site Scripting
High
CVE-2021-24150
Like Button Rating ♥ LikeBtn < 2.6.32 - Server-Side Request Forgery
High
CVE-2021-20652
Name Directory <= 1.17.4 - Cross-Site Request Forgery
High
CVE-2021-4348
Ultimate GDPR & CCPA <= 2.4 - Unauthenticated Settings Import & Export
High
CVE-2021-24159
Contact Form 7 Style <= 3.1.9 Cross-Site Request Forgery
Medium
CVE-2021-25041
Photo Gallery <= 1.5.67 - Reflected Cross-Site Scripting
High
CVE-2021-26754
wpDataTables (Premium) <= 3.4 - SQL Injection
Medium
CVE-2021-24152
Popup Builder <= 3.73 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.