High
CVE-2021-24869
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2021-36826
WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24575
School Management System – WPSchoolPress <= 2.1.9 - SQL Injection
Medium
CVE-2021-25118
Yoast SEO <= 17.2 - Full Path Disclosure
High
8fa97e67-08c1-4553-bada-e4c59f797207
Buddyboss Platform <= 1.7.8 - SQL Injection
Medium
2678d2c6-055e-462e-99da-bdc81bcc3662
Affiliate Power – Sales Tracking for Affiliate Marketers <= 2.2.0 - Reflected Cross-Site Scripting
High
efc434fd-320a-4808-9289-7c2f63d4f5a4
SMTP Mail <= 1.2.1 - SQL Injection
High
CVE-2021-24397
MicroCopy <= 1.1.0 - Authenticated (Admin+) SQL Injection
Critical
40765cfe-a60a-44dc-8cdb-f9c8e42654c3
BuddyPress <= 9.0.0 - SQL Injection
High
63af91ef-54ef-4322-9931-a0d29dbd2aec
Email Artillery (MASS EMAIL) <= 4.1 - Authenticated SQL Injection
Critical
CVE-2021-4347
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
High
CVE-2021-24557
M-vSlider <= 2.1.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-24534
PhoneTrack Meu Site Manager <= 0.1 - Cross-Site Scripting
High
CVE-2021-24452
W3 Total Cache <= 2.1.4 - Reflected Cross-Site Scripting via extension
High
CVE-2021-24520
Stock in & out <= 1.0.4 - SQL Injection
Medium
CVE-2021-24345
Sendit WP Newsletter <= 2.5.1 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24778
Tradetracker-Store < 4.6.60 - Authenticated SQL Injection
High
e27634f8-493b-4edb-a0c7-1bc8890b70f0
Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery
Medium
bd4a1fd2-8831-482d-8ae3-fb78c2657b86
WP DoNotTrack <= 0.8.8 - Authenticated (Admin+) Stored Cross-Site Scripting
High
7a94229a-6316-48e7-bcaa-23cb2cc047b4
Activity Log 2.3.5 - 2.6.1 - SQL Injection
High
1664fef3-6416-4678-9ee7-bed2184d7490
Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections
Critical
25971f3f-4816-416c-9de9-feb6326fe948
Super Store Finder <= 6.4, Super Interactive Maps <= 2.1 - SQL Injection
High
CVE-2021-24160
Responsive Menu 4.0 - 4.0.3 - Authenticated Arbitrary File Upload
High
f56a632d-4c5f-4d89-9cd9-8fc3697ff3ca
Membership by Supsystic <= 1.5.0 - Authenticated (Admin+) Time-Based Blind SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.