High
CVE-2021-39165
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2021-39168
TimelockController vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-39167
TimelockController vulnerability in OpenZeppelin Contracts
Medium
CVE-2021-39171
Unlimited transforms allowed for signed nodes
High
CVE-2021-39174
Cachet configuration leak
High
CVE-2021-39173
Cachet vulnerable to forced reinstall
High
CVE-2021-39172
Cachet vulnerable to new line injection during configuration edition
Medium
CVE-2021-24569
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Medium
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Medium
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Medium
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Medium
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Medium
57be47e2-9aac-42bd-af6a-5060d2f86449
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
Medium
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Medium
CVE-2021-24610
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24633
Countdown Block <= 1.1.1 - Missing Authorization
Medium
001e066f-6add-4426-8cd7-32229a9188d1
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24681
Duplicate Page <= 4.4.1 Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2020-19002
Mezzanine Cross Site Scripting (XSS) vulnerability
Critical
CVE-2020-19001
Command Injection in Simiki
Medium
CVE-2020-19000
Cross Site Scripting (XSS) in Simiki
Medium
eaf17a09-3e35-4df8-acb9-7829942597c6
Woffice CRM <= 4.0.1 - Authorization Bypass
Medium
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.