High
CVE-2021-1725
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2021-24175
Plus Addons for Elementor Page Builder <= 4.1.6 - Authentication Bypass
Critical
25971f3f-4816-416c-9de9-feb6326fe948
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection
Medium
001a7d43-4b00-42e9-bb0c-94a9d5721166
BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure
High
CVE-2021-24295
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.153.3 - Unauthenticated Blind SQL Injection
High
CVE-2021-20678
Paid Memberships Pro <= 2.5.5 - Authenticated SQL Injection
Critical
CVE-2021-24171
WooCommerce Upload Files <= 59.3 - Arbitrary File Upload
Low
CVE-2021-21331
Local Information Disclosure Vulnerability
Unrated
drupal-contrib-2021-004
drupal/webform - SA-CONTRIB-2021-004
High
CVE-2021-26813
markdown2 Regular Expression Denial of Service
High
CVE-2021-27923
Pillow Denial of Service by Uncontrolled Resource Consumption
High
CVE-2021-27922
Pillow Uncontrolled Resource Consumption
High
CVE-2021-27921
Pillow Denial of Service by Uncontrolled Resource Consumption
Low
CVE-2021-21320
User content sandbox can be confused into opening arbitrary documents
Low
CVE-2021-21322
Prefix escape
Medium
CVE-2021-21353
Remote code execution via the `pretty` option.
Critical
CVE-2021-21321
Prefix escape
Medium
CVE-2021-24170
User Profile Picture <= 2.4.0 - Sensitive Information Disclosure
Medium
CVE-2021-24169
Advanced Order Export For WooCommerce <= 3.1.7 - Reflected Cross-Site Scripting
High
CVE-2021-26119
Sandbox escape through template_object in smarty
Medium
CVE-2021-27405
Regular expression Denial of Service in @progfay/scrapbox-parser
High
CVE-2021-27516
URIjs Hostname spoofing via backslashes in URL
High
CVE-2020-28496
Denial of service in three
High
CVE-2021-23341
Denial of service in prismjs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.