High
CVE-2022-21661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2020-36176
iThemes Security <= 7.6.1 - Broken Password Mechanism
Medium
0eb90948-b2b6-4e30-b903-95b7bce5d734
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.2 - IDOR to Sensitive Information Disclosure
Medium
edecb27b-ff11-4186-b8a8-41a85e3e2023
Accept Stripe Payments < 2.0.40 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-4222
WP Paginate <= 2.1.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-25080
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24125
Contact Form Submissions <= 1.7 - Authenticated SQL Injection
Critical
CVE-2020-36727
Newsletter Manager <= 1.5.1 - Insecure Deserialization
High
0f87d37a-879f-4506-a651-8c965a558e28
Thumbnail carousel slider < 1.0.1 - Stored Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2020-29172
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
Medium
CVE-2021-25117
WP-PostRatings <= 1.86 - Cross-Site Scripting
Medium
CVE-2020-29171
All In One WP Security & Firewall <= 4.4.5 - Cross-Site Scripting
High
CVE-2020-35773
Site Offline Or Coming Soon Or Maintenance Mode <= 1.4.2 - Cross-Site Request Forgery and Cross-Site Scripting
High
CVE-2019-6715
W3 Total Cache 0.9.2.6-0.9.3 - File Read / Directory Traversal
Medium
CVE-2021-24126
Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting
Medium
ac352bb2-f624-4c31-951a-988a0b420635
Simple Social Media Share Buttons <= 3.2.0 - Reflected Cross-Site Scripting
High
CVE-2020-35489
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
Medium
CVE-2020-36723
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
Critical
CVE-2020-36719
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Medium
724dead7-0e4a-420d-a5a3-fca578451211
Simple Social Media Share Buttons <= 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2020-35943
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2020-35942
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery
Medium
adebcf1c-bb22-4a25-b79b-b76eb3b3023f
Gutenberg Template Library & Redux Framework <= 4.1.23 - Cross-Site Request Forgery
Medium
CVE-2020-35589
Limit Login Attempts Reloaded <= 2.15.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.