Critical
CVE-2021-24741
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24720
GeoDirectory <= 2.1.1.2 - Authenticated (admin+) Stored Cross-Site Scripting
Medium
86c3ef76-d4d0-4106-850f-88e9ea176979
Easy Social Icons <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24692
Simple Download Monitor <= 3.9.4 - Contributor+ Arbitrary File Download
High
67ae29ee-ec3d-41d2-8691-ba1c615d243d
Meow Gallery (+ Gallery Block) <= 4.1.9 - Missing Authorization to Arbitrary Options Update
High
CVE-2021-24465
Meow Gallery (+ Gallery Block) <= 4.1.8 - SQL Injection
Medium
f4e8ad18-fa25-414c-8a94-9ad9bd3c2e31
XO Event Calendar <= 2.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-39322
Easy Social Icons <= 3.0.8 – Reflected Cross-Site Scripting
Medium
CVE-2021-38314
Gutenberg Template Library & Redux Framework <= 4.2.11 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2021-33849
Zoho CRM Lead Magnet <= 1.7.2.4 - Cross-Site Scripting
High
CVE-2021-38312
Gutenberg Template Library & Redux Framework <= 4.2.1 - Incorrect Authorization Leading to Arbitrary Plugin Installation and Post Deletion
Medium
1f38aca5-0d69-421e-a3f2-d12cd593a88a
Easy Social Icons <= 3.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2021-4372
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Stored Cross-Site Scripting
Medium
afd67c36-31ec-4e44-bad5-a018834ccfbc
qTranslate X <= 3.4.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
8a95633f-b5e1-4a92-b566-90fb05a289ce
Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-4353
WooCommerce Dynamic Pricing and Discounts <= 2.4.1 - Unauthenticated Settings Import/Export
Medium
23132298-f1de-4085-a76f-f007b8b7de15
WordPress Geolocation Plugin – CF Geo Plugin <= 7.13.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-39320
underConstruction <= 1.18 - Reflected Cross-Site Scripting
Medium
CVE-2021-24569
Cookie Notice & Compliance for GDPR / CCPA <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-39316
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.45 - Directory Traversal
Medium
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Medium
ba88a1f5-9ebf-4899-81b3-e65587ae2fe2
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
Medium
834ff44a-4259-49a5-bad3-26fce393fb98
Docket Cache – Object Cache Accelerator <= 21.08.01 - Reflected Cross-Site Scripting
Medium
CVE-2021-24670
CoolClock <= 4.3.4 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.