Critical
860e70be-2ccd-4d4d-b0d9-bde8d163c211
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
7d7da9c3-dc46-4c61-8737-052844939e93
123ContactForm for WordPress <= 1.5.6 - Arbitrary Post Creation
Critical
6cc5f274-6e71-47a1-b4ec-9b3ba46fd7bf
123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification
High
22f79a03-9195-4d5d-a189-9b5e1d3307c8
Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection
High
CVE-2021-24142
301 Redirects - Easy Redirect Manager < 2.51 - SQL Injection
Medium
CVE-2021-24124
WP Shieldon <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24339
Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label field
Medium
CVE-2021-24338
Pods 2.4.4.1 - 2.7.26 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-35748
FV Flowplayer Video Player <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2016-10886
WP Editor < 1.2.6 - Incorrect Permission Assignment or Protection
Medium
CVE-2021-24168
Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-3133
Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery
High
CVE-2021-4383
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection
Medium
CVE-2021-4378
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2021-4371
WP Quick FrontEnd Editor <= 5.5 - Authenticated Settings Change
Medium
CVE-2021-24157
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2021-4363
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
Medium
CVE-2021-3124
Custom Global Variables <= 1.0.5 - Stored Cross-Site Scripting via 'name'
Critical
CVE-2020-29045
Five Star Restaurant Menu <= 2.2.0 - Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
Critical
03be4344-d388-4357-8a2e-c3b9c8b83017
e-signature < 1.5.6.8 - Unauthenticated Remote Code Execution
Medium
234a847b-3ffa-4c5c-9bba-39df227de0bc
Tutor LMS <= 1.9.12 - Reflected Cross-Site Scripting
Critical
e30fe90a-774c-41ba-b28e-8b8128fd72cc
Modal Survey <= 2.0.1.8 - PHP Object Injection
High
d0215e53-0394-4845-93e4-463cd5642fb3
Modal Survey < 2.0.1.8.2 - Authorization Bypass
Medium
CVE-2021-47984
WP24 Domain Check <= 1.6.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.