Medium
CVE-2021-24796
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-24856
Shared Files – Easy Download Manager and File Sharing Plugin with Frontend File Upload <= 1.6.60 - Cross-Site Scripting
Medium
9169af40-32da-4b38-95ee-d0c7d4e67779
IMPress for IDX Broker <= 3.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2021-24853
QR Redirector <= 1.5 - Cross-Site Request Forgery
High
6f00dfd7-3194-4459-b895-f16d3aa8d66f
Responsive Image Slider, Photo Gallery And Carousel < 1.3.2 - Cross-Site Request Forgery
Medium
CVE-2021-24787
Client Invoicing by Sprout Invoices <= 19.9.6 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24850
Insert Pages <= 3.6.1 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24758
Email Log <= 2.4.6 - Admin+ SQL Injection
Medium
CVE-2021-24852
MouseWheel Smooth Scroll <= 5.6 - Plugin's Setting Update via Cross-Site Request Forgery
Medium
CVE-2021-39357
Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting
High
CVE-2021-24772
Stream <= 3.8.1 - Admin+ SQL Injection
High
CVE-2021-24847
SEO Redirection <= 8.1 - Subscriber+ SQL Injection
Medium
CVE-2021-24851
Insert Pages <= 3.6.1 - Contributor+ Arbitrary Posts/Pages Access
Medium
CVE-2021-24815
Paypal Donation <= 1.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24841
Helpful <= 4.4.58 - Admin+ Stored Cross-Site Scripting
Medium
0f77d41a-8b72-412f-9560-267bc50f9aec
Active Directory Integration / LDAP Integration <= 3.6.94 - Reflected Cross-Site Scripting
High
CVE-2021-25023
Speed Booster Pack <= 4.3.3 - Admin+ SQL Injection
Medium
CVE-2021-39343
MPL-Publisher <= 1.30.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39355
Indeed Job Importer <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-39329
JobBoardWP – Job Board Listings and Submissions <= 1.0.7 - Stored Cross-Site Scripting
High
CVE-2021-42340
Missing Release of Resource after Effective Lifetime in Apache Tomcat
Medium
CVE-2021-43409
WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 15.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24834
YOP Poll <= 6.3.0 - Author+ Stored Cross-Site Scripting via Options Module
Medium
CVE-2021-24833
YOP Poll <= 6.3.0 - Author+ Stored Cross-Site Scripting via Preview Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.