High
CVE-2021-24630
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-24631
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24625
SpiderCatalog <= 1.7.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-39317
AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2021-41125
Scrapy HTTP authentication credentials potentially leaked to target websites
High
CVE-2021-41121
Memory corruption when returning a literal struct with a private call inside of it
High
CVE-2021-41120
Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Medium
CVE-2021-28170
Improper Input Validation in Jakarta Expression Language
High
CVE-2021-28128
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Medium
CVE-2021-28125
Open Redirect in Apache Superset
Medium
CVE-2021-23372
Denial of Service (DoS) in mongo-express
Medium
CVE-2021-30109
Cross-site Scripting in Froala Editor
High
CVE-2021-41126
Deleted Admin Can Sign In to Admin Interface
Medium
CVE-2020-19003
Verification check bypass in Gate One
Medium
CVE-2021-24674
Genie WP Favicon <= 0.5.2 - Cross-Site Request Forgery
Medium
CVE-2021-24608
Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24816
Phoenix Media Rename <= 3.4.2 - Author Arbitrary Media File Renaming
Medium
CVE-2021-24767
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.7.8 - Log Deletion via Cross-Site Request Forgery
Medium
CVE-2021-24708
WP All Export <= 1.3.0 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24829
Visitor Traffic Real Time Statistics <= 3.8 - Subscriber+ SQL Injection
Medium
103cbd07-4698-4b64-820d-d2df3fce95da
Age Gate <= 2.16.3 - Stored Cross-Site Scripting
Medium
CVE-2021-41122
missing clamps for decimal args in external functions
High
CVE-2021-41124
Splash authentication credentials potentially leaked to target websites
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.