Medium
CVE-2021-24485
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24563
Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24487
St Daily Tip <= 4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-24662
Game Server Status <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2021-42359
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2021-24489
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24545
WP HTML Author Bio <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2021-39325
OptinMonster <= 2.6.0 - Reflected Cross-Site Scripting
High
CVE-2021-24754
MainWP Child Reports <= 2.0.7 - Admin+ SQL Injection
Medium
CVE-2021-24412
Html5 Audio Player <= 2.1.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24622
Customer Service Software & Support Ticket System < 5.10.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2021-39331
YITH Easy Login & Register Popup for WooCommerce <= 1.8.0 - Authentication Bypass via Password Reset
Medium
CVE-2021-24672
One User Avatar <= 2.3.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24760
Gutenberg PDF Viewer Block <= 1.0 - Cross-Site Scripting
Medium
CVE-2021-24675
One User Avatar <= 2.3.6 - Cross-Site Request Forgery
Medium
CVE-2021-24752
CatchThemes Plugins (Various Versions) - Missing Authorization
Medium
CVE-2021-24413
Easy Twitter Feed < 1.2 - Cross-Site Scripting
High
CVE-2021-24642
Scroll Baner <= 1.0 - Cross-Site Request Forgery to Remote Code Execution and/or Cross-Site Scripting
Medium
CVE-2021-24740
Tutor LMS <= 1.9.8 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24416
StreamCast – Radio Player for WordPress <= 2.1.0 - Cross-Site Scripting
Medium
CVE-2021-24415
Polo Video Gallery – Best wordpress video gallery plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24615
Wechat Reward <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-24702
LearnPress <= 4.1.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24612
Sociable <= 4.3.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.