Medium
CVE-2021-24652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-24491
Fileviewer <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2021-38315
SP Project & Document Manager <= 4.25 - Reflected Cross-Site Scripting
Medium
CVE-2021-34641
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
Medium
CVE-2021-24623
WordPress Advanced Ticket System, Elite Support Helpdesk <= 1.0.63 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-37598
WP Cerber < 8.9.3 - Access Bypass Control
Medium
CVE-2021-4423
RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass
Medium
e298663b-746c-40fc-a2ca-cb35d472baab
Amazon Auto Links <= 4.6.19 - Reflected Cross-Site Scripting
Medium
CVE-2021-24431
Language Bar Flags <= 1.0.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2021-4420
Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4419
WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypass
High
CVE-2021-24620
Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2021-4409
WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4404
Event Espresso 4 Decaf <= 4.10.11 - Cross-Site Request Forgery Bypass
Medium
86e6a246-557a-42f7-8f1b-b1b914f9f928
Afterpay Gateway for WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting
Critical
CVE-2021-37597
WP Cerber Security < 8.9.3 - Multifactor Bypass
High
63af91ef-54ef-4322-9931-a0d29dbd2aec
Email Artillery (MASS EMAIL) <= 4.1 - Authenticated SQL Injection
Medium
CVE-2021-4388
Opal Estate <= 1.6.11 - Missing Authorization
Medium
CVE-2021-4396
Rucy <= 0.4.4 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24621
WP Courses LMS < 2.0.44 - Authenticated Stored Cross-Site Scripting
Medium
472b523f-b987-4da0-8533-54ae076d7a6b
Email Artillery (MASS EMAIL) <= 4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
420c29d6-e712-4891-a2f6-b18f4718b35d
CBX Bookmark & Favorite <= 1.6.8 - Reflected Cross-Site Scripting
High
3f2d6c42-4baa-4d15-934f-0f8998c7d654
Post Carousel < 2.3.5 - Missing Capabilities Check
Medium
CVE-2021-24508
Smash Balloon Social Post Feed <= 2.19.1 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.