Medium
CVE-2021-24525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-24663
Simple Schools Staff Directory <= 1.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2021-24583
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Deletion
Medium
CVE-2021-24667
Gallery Blocks with Lightbox <= 2.2.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24613
Post Views Counter <= 1.3.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24639
OMGF <= 4.5.3 - Subscriber+ Arbitrary File/Folder Deletion
High
CVE-2021-24402
WP iCommerce – the first interactive ecommerce for wordpress <= 1.1.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24404
WP Board <= 1.1(Beta) - Authenticated (Admin+) SQL Injection
High
CVE-2021-24396
GSEOR – WordPress SEO Plugin <= 1.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24511
Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More < 3.3.1.0 - Authenticated SQL Injection via product_id Parameter
High
CVE-2021-24400
Display Users <= 2.0.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24399
The Sorter <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24397
MicroCopy <= 1.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24403
WordPress Page Contact <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24398
Responsive 3D Slider <= 1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24401
WP Domain Redirect <= 1.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2021-36748
Improper neutralization of SQL parameter in SimpleBlog module from Prestahome for PrestaShop
Medium
CVE-2020-18899
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Medium
CVE-2021-32768
Cross-Site Scripting via Rich-Text Content
Medium
CVE-2021-24618
Donate With QRCode <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
97c441c3-ae8b-4b7a-8480-da81c0f339ab
Donate With QRCode <= 1.4.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2021-39286
Cross-site scripting in pywb
High
CVE-2021-24636
Print My Blog – Print, PDF, & eBook Converter WordPress Plugin <= 3.4.1 - Cross-Site Request Forgery
Medium
CVE-2021-24582
ThinkTwit < 1.7.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.