Medium
CVE-2021-34629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
f8aa8dd6-abff-4c37-98d5-39a924b15651
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-34631
NewsPlugin <= 1.0.18 – Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24529
Grid Gallery – Photo Image Grid Gallery <= 1.2.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24533
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-4452
Google Language Translator <= 6.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-24531
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-1920
Regular expression denial of service in react-native
High
CVE-2019-25050
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and
High
fc62adbf-1f04-46b2-9ae9-aac3dbce8759
WP SEO TDK <= 2.1.2 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2021-24497
Giveaway <= 1.2.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24547
KN Fix Your Title <= 1.0.1 - Stored Cross-Site Scripting
Medium
5653f1aa-06da-4208-afa2-19ef31b8be2f
Google Language Translator <= 6.0.9 - Authenticated Cross-Site Scripting
High
CVE-2021-24602
HM Multiple Roles <= 1.2 - Privilege Escalation via Arbitrary Role Change
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
Medium
0efff314-b14f-4af4-b225-ba7e41d01b2e
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2021-3647
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Medium
CVE-2021-28114
Cross-site Scripting in Froala WYSIWYG Editor
High
CVE-2021-32770
Basic-auth app bundle credential exposure in gatsby-source-wordpress
Medium
CVE-2021-34429
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Medium
fd12ce4a-585d-4e26-88fb-1ab9dcc8727d
RestroPress <= 2.8.3 - Missing Authorization
Medium
CVE-2021-24535
Light Messages <= 1.0 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-24380
Shantz WordPress QOTD <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.