Medium
e9f090bb-8e85-4fc3-a904-0a7ff85db8f1
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2021-24666
Podlove Podcast Publisher <= 3.5.5 - Unauthenticated SQL Injection
Medium
bdd0bdf3-6952-4b87-a3e8-156757d22e74
WooCommerce Affiliate Plugin – Coupon Affiliates <= 4.11.0.1 - Reflected Cross-Site Scripting
High
9821e51c-1042-47b8-b104-32f5651c31c9
TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting
Medium
926246a7-2f0d-4472-ae0a-fa3d95e5810f
Contact List – Easy Business Directory, Staff Directory and Address Book Plugin <= 2.9.41 - Reflected Cross-Site Scripting
Medium
83d46dce-b218-49ed-85ee-0e8d2a391eb9
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24634
Recipe Card Blocks by WPZOOM <= 2.8.2 - Authenticated Stored Cross-Site Scripting
Medium
6b4087e9-071c-4cfc-b23d-ae8dd0059a2b
Live Scores for SportsPress <= 1.9.0 - Reflected Cross-Site Scripting
High
002c6fea-4b76-47a6-9a39-1195f18aa6f6
Live Scores for SportsPress <= 1.9.0 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24665
WP Video Lightbox <= 1.9.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24657
Limit Login Attempts <= 4.0.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24725
Comment Link Remove and Other Comment Tools <= 2.1.4 - Arbitrary Comment Deletion via Cross-Site Request Forgery
Critical
CVE-2021-24638
OMGF <= 4.5.3 - Unauthenticated Path Traversal in REST API
Medium
CVE-2021-24585
Timetable and Event Schedule by MotoPress <= 2.3.19 - Arbitrary User's Hashed Password/Email/Username Disclosure
Medium
CVE-2021-24724
Timetable and Event Schedule by MotoPress <= 2.3.18 - Author+ Stored Cross-Site Scripting
Medium
CVE-2021-24584
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Update
Medium
CVE-2021-24637
Google Fonts Typography <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via blockType arguments
Medium
CVE-2021-24525
WordPress Shortcodes Plugin — Shortcodes Ultimate <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-24663
Simple Schools Staff Directory <= 1.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2021-24583
Timetable and Event Schedule by MotoPress <= 2.4.1 - Unauthorised Event TimeSlot Deletion
Medium
CVE-2021-24667
Gallery Blocks with Lightbox <= 2.2.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24613
Post Views Counter <= 1.3.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24639
OMGF <= 4.5.3 - Subscriber+ Arbitrary File/Folder Deletion
High
CVE-2021-24402
WP iCommerce – the first interactive ecommerce for wordpress <= 1.1.1 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.