Medium
ea24cb9e-88a5-45a2-93f8-544afef5a83b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
ded73f27-6b3a-435a-861f-5e10938d6d1a
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.2.4 - Stored Cross-Site Scripting
Medium
cb4681a5-d722-4585-97d3-370938c079a2
WP Table Builder – WordPress Table Plugin <= 1.3.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24381
Ninja Forms <= 3.5.8.1 - Cross-Site Scripting
Medium
CVE-2021-24779
WP Debugging <= 2.10.2 - Unauthenticated Plugin Settings Update
Medium
CVE-2021-24785
Great Quotes <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24774
Check & Log Email <= 1.0.2 - Admin+ SQL Injection via Order and OrderBy parameters
Medium
CVE-2021-24514
Visual Form Builder <= 3.0.3 - Admin+ Stored Cross-Site Scripting
Medium
36ae359b-7694-4e8b-9fe6-5e9e40345305
WooCommerce Product Table Lite <= 2.4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24769
Permalink Manager Lite <= 2.2.12 - Admin+ SQL Injection
Medium
CVE-2021-24689
Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Authenticated (Admin+) Arbitrary System File Read
Medium
CVE-2021-24744
Cimatti Contact Forms <= 1.4.11 - Cross-Site Scripting
Critical
CVE-2020-28271
Prototype Pollution in deephas
Medium
e93ad115-1a0b-4d33-b89f-13e39508c9b0
Careerfy <= 7.0 - Cross-Site Request Forgery and Missing Authorization
High
CVE-2021-4358
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-38153
Observable Discrepancy in Apache Kafka
Medium
ghsa-65p7-pjj8-ggmr
Member account takeover
Critical
CVE-2021-31819
Remote Code Execution in Halibut
Critical
CVE-2021-4436
3DPrint Lite < 1.9.1.5 - Arbitrary File Upload
High
CVE-2021-4227
ark-commenteditor <= 2.15.6 - iframe Injection
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36823
Absolutely Glamorous Custom Admin <= 6.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36873
WordPress iQ Block Country <= 1.2.11 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-41086
Clipboard-based XSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.