Critical
CVE-2021-24863
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24901
Security Audit <= 1.0.0 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2021-24792
Shiny Buttons – CSS3 Button Generator for WordPress <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24817
Ultimate NoFollow <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24782
Flex Local Fonts <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24845
Improved Include Page <= 1.2 - Authenticated (Contributor+) Arbitrary Posts/Pages Access
Medium
CVE-2021-24784
WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via Cross-Site Request Forgery
Medium
CVE-2021-24855
Display Post Metadata <= 1.4.0 - Stored Cross-Site Scripting
Medium
CVE-2021-24819
Page/Post Content Shortcode <= 1.0 - Missing Authorization
High
CVE-2021-24861
Quotes Collection <= 2.5.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24859
User meta shortcodes <= 0.5 - Improper Access Control
High
CVE-2021-24747
SEO Booster <= 3.7 - Admin+ SQL Injection
High
CVE-2021-24790
Contact Form Advanced Database <= 1.0.8 - Missing Authorization
High
CVE-2021-24848
Mediamatic – Media Library Folders <= 2.8.0 - SQL Injection
High
CVE-2021-24970
All-In-One-Gallery <= 2.4.9 - Admin+ Local File Inclusion
Medium
CVE-2021-24780
Single Post Exporter <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2021-24955
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24836
Temporary Login Without Password <= 1.7.0 - Subscriber+ Plugin Settings Update
Medium
CVE-2021-24925
Modern Events Calendar Lite <= 6.1.0 - Reflected Cross-Site Scripting via current_month_divider parameter
Critical
CVE-2021-24857
ToTop Link <= 1.7.1 - Unauthenticated PHP Object Injection
High
CVE-2021-24922
Pixel Cat – Conversion Pixel Manager <= 2.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24972
Pixel Cat Lite <= 2.6.2 - Admin+ Stored Cross-Site Scripting
Critical
CVE-2021-24946
Modern Events Calendar Lite <= 6.1.4 - Unauthenticated Blind SQL Injection via time Parameter
Medium
CVE-2021-24932
Auto Featured Image <= 3.9.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.