Medium
CVE-2021-24738
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24739
Logo Carousel <= 3.4.1 - Unauthorised Private Post Access
High
CVE-2021-4208
ExportFeed <= 2.0.1.0 - SQL Injection
Critical
CVE-2021-24849
WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2021-24997
WP Guppy < 1.3 - Information Disclosure
Medium
CVE-2021-24941
Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id
High
CVE-2022-0889
Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting
Medium
5de937cc-da05-4b95-807d-dc19a8b7d6b0
Child Theme Generator <= 2.2.7 Cross-Site Request Forgery to Arbitrary Folder Deletion
High
CVE-2021-39353
Easy Registration Forms <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-42363
Preview E-Mails for WooCommerce <= 1.6.8 - Reflected Cross-Site Scripting
Medium
98be1eb8-ee7d-4a39-b70f-5037b651ba96
Pixel Cat – Conversion Pixel Manager <= 2.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24982
Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting
High
3c476263-72b7-48f1-8ba3-91d69eae7b6a
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-36884
Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
3b8ea0b1-5050-43fc-8b80-b6a501a607fe
Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.1 - Reflected Cross-Site Scripting
High
CVE-2021-20846
Push Notifications for WordPress (Lite) < 6.0.1 - Cross-Site Request Forgery
Medium
CVE-2021-24828
Mortgage Calculator / Loan Calculator < 1.5.17 - Cross-Site Scripting
High
CVE-2021-24981
Directorist <= 7.0.6.1 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24578
SportsPress <= 2.7.8 - Reflected Cross-Site Scripting
Critical
CVE-2021-4455
Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2021-24795
Filter Portfolio Gallery <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2021-24756
WP System Log < 1.0.21 - Cross-Site Scripting
Medium
CVE-2021-24954
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
Medium
CVE-2021-24818
Wp Limits <= 1.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.