Medium
CVE-2021-4399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-24470
Yada Wiki <= 3.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24478
Bookshelf <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24521
Side Menu Lite <= 2.2 - SQL Injection
Critical
CVE-2021-34623
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24488
Post Grid <= 2.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-24474
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting via id Parameter
Medium
CVE-2021-24450
ProfilePress <= 3.1.7 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24473
User Profile Picture < 2.6.0 - Authenticated Insecure Direct Object Reference
Medium
CVE-2021-24481
Any Hostname <= 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2020-26153
Event Espresso Core <= 4.10.6.p - Reflected Cross-Site Scripting
Medium
2621cb32-3753-42e7-8690-88c680bdf808
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting
Medium
1d430b33-1607-46b3-8780-ac5cfbb7d6ec
EventCalendar <= 1.1.45 - Cross-Site Scripting
Critical
CVE-2021-4449
ZoomSounds <= 5.96 - Unauthenticated Arbitrary File Upload
Low
CVE-2021-34428
SessionListener can prevent a session from being invalidated breaking logout
Unrated
drupal-contrib-2021-019
drupal/opigno_group_manager - SA-CONTRIB-2021-019
Unrated
drupal-contrib-2021-018
drupal/opigno_learning_path - SA-CONTRIB-2021-018
Medium
CVE-2021-24447
WP Image Zoom <= 1.46 - Local File Inclusion
Medium
CVE-2021-20746
WordPress Popular Posts <= 5.3.2 - Authenticated Cross-Site Scripting
Medium
CVE-2018-10704
Cross-site Scripting in yii2cmf
Critical
CVE-2019-7725
Deserialization of Untrusted Data in NukeViet
Critical
CVE-2019-7726
SQL Injection in NukeViet
High
CVE-2020-23264
Cross-Site Request Forgery in forkcms
High
CVE-2020-13252
Command Injection in Centreon
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.