Medium
CVE-2021-44777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2020-26705
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via
Critical
CVE-2020-25911
XML External Entity vulnerability in MODX CMS
Critical
CVE-2020-36381
Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36380
Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
High
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Medium
CVE-2021-3904
Cross-Site Scripting in grav
Medium
CVE-2021-39346
Google Maps Easy <= 1.9.33 - Stored Cross-Site Scripting
High
CVE-2021-39341
OptinMonster <= 2.6.4 - Unprotected REST-API Endpoints
Medium
CVE-2021-24751
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24908
Check & Log Email <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2021-24748
Email Before Download <= 6.7 - Admin+ SQL Injection
Medium
CVE-2021-24927
My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting
Medium
CVE-2021-24768
WP RSS Aggregator <= 4.19.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24811
Shop Page WP <= 1.2.7 - Authenticated Cross-Site Scripting
High
CVE-2021-24860
BSK PDF Manager <= 3.1.1 - Admin+ SQL Injection
Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
Medium
6a906f90-fac2-43cf-8f67-99f8862dc636
Ibtana - Ecommerce Product Addons <= 0.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24822
Stylish Cost Calculator <= 7.0.3 - Stored Cross-Site Scripting
High
CVE-2021-24755
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.2 - Subscriber+ SQL Injection
Medium
CVE-2021-24918
Smash Balloon Social Post Feed <= 4.0 - Arbitrary Plugin Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-23174
Download Monitor <= 4.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-31567
Download Monitor <= 4.4.6 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2021-36920
Download Monitor <= 4.4.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.