High
CVE-2021-24575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
77fd0714-ae9d-4136-beed-7f37b1266dc9
iPages Flipbook < 1.4.3 - Reflected Cross-Site Scripting
High
CVE-2021-24835
WCFM - Frontend Manager for WooCommerce <= 6.5.11 - Customer/Subscriber+ SQL Injection
Medium
5e618864-e862-4d4f-aa28-3e2fb78882fc
iPanorama 360 WordPress Virtual Tour Builder < 1.6.22 - Reflected Cross-Site Scripting
High
58a83ec8-e294-4fb6-9f1a-19562b2e499d
School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting
High
CVE-2021-24832
WP SEO Redirect 301 <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2021-24701
Quiz Tool Lite <= 2.3.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24721
Loco Translate <= 2.5.3 - Authenticated PHP Code Injection
High
CVE-2021-24669
MAZ Loader – Preloader Builder for WordPress <= 1.3.2 - SQL Injection
Medium
CVE-2021-24798
WP Header Images <= 2.0.0 - Reflected Cross-Site Scripting
High
2657aa8a-b2de-4cb4-b9f8-e7fb0c887a7a
WooCommerce Affiliate Plugin – Coupon Affiliates < 4.11.3.4 - Cross-Site Request Forgery
Medium
202a8724-14da-4edb-870e-2fee205b1d53
Vision Interactive For WordPress <= 1.5.1 - Reflected Cross-Site Scripting
Medium
1d68ea19-9592-483a-a5fd-635819f9b863
Easy Custom JS And CSS <= 1.1.2 - Reflected Cross-Site Scripting
Medium
112564b7-bf3c-4c17-8113-e05ab75edf6a
ImageLinks Interactive Image Builder <= 1.5.2 - Reflected Cross-Site Scripting
Critical
CVE-2021-24827
Asgaros Forum <= 1.15.12 - Unauthenticated SQL Injection
High
CVE-2021-24647
Pie Register <= 3.7.1.5 - Authentication Bypass
High
CVE-2021-24791
Header Footer Code Manager <= 1.1.13 - Authenticated SQL Injections
Medium
2505ffdd-d697-4c69-8f75-0bc4d09e1b1f
Inline Related Posts <= 3.0.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2021-36911
Comment Engine Pro <= 1.0 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2021-24629
Post Content XMLRPC <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24626
Chameleon CSS <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2021-24807
Support Board <= 3.3.4 - Agent+ Stored Cross-Site Scripting
High
CVE-2021-24628
Wow Forms – create any form with custom style <= 3.1.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24627
G Auto-Hyperlink <= 1.0.1 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.