Medium
70493df9-82b8-4160-8d75-889fada7541f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-4352
JobSearch WP Job Board <= 1.8.1 - Missing Authorization to Settings Change
Medium
4fe0df91-21f0-4eef-8064-2b283f38b181
World Travel Information <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24801
WP Survey Plus <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24695
Simple Download Monitor <= 3.9.5 - Sensitive Data Exposure
Medium
CVE-2021-24788
Batch Cat <= 0.3 - Missing Authorization
High
CVE-2021-24763
Perfect Survey <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2021-24594
Translate WordPress - Google Language Translator <= 6.0.11 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24698
Simple Download Monitor <= 3.9.5 - Contributor+ Arbitrary Thumbnail Removal
Critical
CVE-2021-24693
Simple Download Monitor <= 3.9.4 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Medium
CVE-2021-24645
Booking.com Product Helper <= 1.0.1 - Cross-Site Scripting
Critical
04b7a2ba-e299-4781-8ee6-644938bf9629
MStore API < 3.4.5 - Arbitrary File Upload
Medium
f62713c9-bf87-44be-9b7e-c088989bad77
Themify Builder <= 5.3.1 - Reflected Cross-Site Scripting
High
CVE-2021-24809
BP Better Messages <= 1.9.9.37 - Cross-Site Request Forgery
Medium
CVE-2021-24624
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 2.4.1 - Multiple Admin+ Cross Site Scripting
High
CVE-2021-24572
Accept Donations with PayPal <= 1.3.0 Cross-Site Request Forgery to Post Deletion
Medium
CVE-2021-24570
Paypal Donation <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-24808
BP Better Messages <= 1.9.9.37 - Reflected Cross-Site Scripting
Medium
CVE-2021-24742
Logo Slider and Showcase <= 1.3.36 - Settings Update
Medium
CVE-2021-24813
Events Made Easy <= 2.2.23 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24799
Far Future Expiry Header <= 1.4 - Plugin's Settings Update via Cross-Site Request Forgery
Medium
CVE-2021-24781
Image Source Control Lite < 2.3.1 - Insecure Direct Object Reference
Medium
48b4214f-b722-405e-9bb7-a1faa68f0429
Cardinity Payment Gateway for WooCommerce <= 3.0.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.