Critical
CVE-2021-24493
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-34641
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
Medium
CVE-2021-37598
WP Cerber < 8.9.3 - Access Bypass Control
High
63af91ef-54ef-4322-9931-a0d29dbd2aec
Email Artillery (MASS EMAIL) <= 4.1 - Authenticated SQL Injection
Medium
472b523f-b987-4da0-8533-54ae076d7a6b
Email Artillery (MASS EMAIL) <= 4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24508
Smash Balloon Social Post Feed <= 2.19.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24490
Email Artillery (MASS EMAIL) <= 4.1 - Arbitrary File Upload
Medium
13cb5c62-34fb-4bbc-b42a-cc8a16d51258
Email Artillery (MASS EMAIL) <= 4.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-34653
WP Fountain <= 1.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-34659
Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting
Medium
CVE-2021-34642
Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting
Medium
f810326f-f84a-4066-aa28-5caa915ba877
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Medium
CVE-2021-24523
Daily Prayer Time <= 2021.08.09 - Stored Cross-Site Scripting
Medium
CVE-2021-24605
Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
Medium
603846de-5d3b-498f-844b-306d80df80da
Two Factor Authentication (2FA , MFA, OTP SMS and Email) <= 1.0.7 - Cross-Site Scripting
Medium
CVE-2021-24435
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
Medium
be44a7e0-f0e0-4e2e-ac1e-0550d8e5d994
SpeakOut! Email Petitions <= 2.13.1.1 - Cross-Site Scripting
High
b0d8499a-a630-4c2b-9381-78ac83da119d
WordPress Download Manager <= 3.2.12 - Cross-Site Request Forgery
High
CVE-2021-24522
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Medium
CVE-2021-24603
Site Reviews <= 5.13.0 - Admin+ Stored Cross-Site Scripting
Medium
89614950-8517-4765-886a-1aa30a2f052e
Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting
High
CVE-2021-4355
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
High
CVE-2021-24728
Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection
Medium
CVE-2021-24609
Mapa Politico España < 3.7.0 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.