Critical
CVE-2021-25289
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24211
WordPress Related Posts <= 3.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24210
PhastPress <= 1.110 - Open Redirect
High
CVE-2021-4448
Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization
High
CVE-2021-21384
Null characters not escaped
Medium
CVE-2021-23346
html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)
High
CVE-2021-26814
Improper Input Validation (RCE)
Medium
CVE-2021-22132
Insufficiently Protected Credentials in Elasticsearch
Medium
CVE-2020-7014
Privilege Escalation Flaw in Elasticsearch
Low
CVE-2020-7020
Privilege Context Switching Error in Elasticsearch
Medium
CVE-2021-22134
Exposure of Sensitive Information to an Unauthorized Actor
Unrated
drupal-contrib-2021-005
drupal/fac - SA-CONTRIB-2021-005
High
CVE-2021-27291
Pygments vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2021-24203
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24202
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size
Medium
CVE-2021-24205
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter
Medium
CVE-2021-24201
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24206
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size
Medium
CVE-2021-24204
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag
Medium
04601634-d707-44a7-9b5f-46c4b9687469
BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite
Medium
CVE-2021-4367
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
Medium
CVE-2021-24187
SEO Redirection Plugin - 301 Redirect Manager <= 6.3 - Reflected Cross-Site Scripting
Medium
5d7bcd71-e299-47fe-a749-e72c49b8129e
BuddyPress - 7.0.0 - 7.2.0 - Insufficient Privilege De-escalation
Medium
CVE-2021-24199
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.