Medium
CVE-2021-25102
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-0780
SearchIQ – The Search Solution <= 3.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
Medium
CVE-2022-1054
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
Critical
CVE-2022-0693
Master Elements <= 8.0 - Unauthenticated SQL injection
Medium
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Medium
CVE-2022-1152
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-46781
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
High
CVE-2021-24957
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
High
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Medium
CVE-2021-36846
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1046
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
Critical
CVE-2022-0992
SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup
High
CVE-2021-25086
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Medium
CVE-2022-1218
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Medium
540d2495-7ad4-428c-b86e-9af73d0ebe51
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Medium
CVE-2022-0287
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Medium
CVE-2022-1557
ULeak Security & Monitoring Plugin <= 1.2.3 - Stored Cross-Site Scripting
Medium
2ef5a8f1-ed3c-48bb-9554-b42e9e8d645d
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Enabled/Disable
Medium
CVE-2022-1186
Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
Critical
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQL Injection
Medium
CVE-2022-1092
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
High
CVE-2022-1091
Safe SVG <= 1.9.9 - Content-Type Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.