High
CVE-2020-12477
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-32767
Information Disclosure in User Authentication
High
CVE-2021-32769
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
High
CVE-2021-31292
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
High
CVE-2021-34632
SEO Backlinks <= 4.0.1 - Cross-Site Request Forgery
High
CVE-2021-34628
Admin Custom Login <= 3.2.7 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24574
Simple Banner <= 2.10.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24559
Qyrr – simply and modern QR-Code creation <= 0.7 - Cross-Site Scripting
Medium
CVE-2021-24564
WPFront Scroll Top <= 2.0.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24561
WP SMS <= 5.4.12 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-36880
Listing, Classified Ads & Business Directory – uListing <= 2.0.3 - Unauthenticated SQL Injection
Medium
CVE-2021-24486
Simple Social Media Share Buttons <= 3.2.2 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24506
Slider Hero with Animation, Video Background & Intro Maker <= 8.2.6 - SQL Injection
High
CVE-2021-34637
Post Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24524
GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-4347
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
High
CVE-2021-24565
Contact Form 7 Captcha <= 0.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-34635
Poll Maker <= 3.2.8 – Reflected Cross-Site Scripting
Medium
CVE-2021-24571
HD Quiz <= 1.8.3 - Stored Cross-Site Scripting
High
CVE-2021-24552
Simple Events Calendar <= 1.4.0 - Authenticated SQL Injection
Critical
CVE-2021-24551
Edit Comments <= 0.3 - Unauthenticated SQL Injection
High
CVE-2021-24554
Paytm – Donation Plugin <= 1.3.2 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24557
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24558
Project Status <= 1.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.