Medium
CVE-2021-25099
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-29454
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
High
df015a51-7eb8-4fbc-839f-bcf6b2e2b1a7
AccessPress Social Icons 1.8.2 - Backdoor
Medium
CVE-2022-0186
Image Photo Gallery Final Tiles Grid <= 3.5.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-25100
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
High
CVE-2022-36389
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
Medium
CVE-2022-0252
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool
Medium
CVE-2021-25033
WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect
Medium
CVE-2022-0188
CMP - Coming Soon & Maintenance Plugin <= 4.0.18 - Unauthenticated Arbitrary CSS Update
High
6c718d65-eb40-43db-821f-344c6eca2384
WP-Appbox <= 4.3.17 - Local File Inclusion
High
69725919-490c-4357-872c-d8112af5fe40
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization
Medium
CVE-2021-25107
Form Store to DB <= 1.1.0 - Stored Cross-Site Scripting
Medium
CVE-2022-0200
Themify Portfolio Post <= 1.1.6 - Reflected Cross-Site Scripting
High
CVE-2022-0190
Ad Invalid Click Protector <= 1.2.5 - SQL Injection
High
CVE-2022-0236
WP Import Export Lite & WP Import Export <= 3.9.15 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2021-25110
Futurio Extra <= 1.6.2 - Sensitive Information Disclosure
Medium
CVE-2022-0212
SpiderCalendar <= 1.6.64 - Reflected Cross-Site Scripting
High
CVE-2022-0215
Side Cart Woocommerce (Ajax) <= 2.0 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Medium
CVE-2021-25103
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
Critical
CVE-2021-25114
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
High
CVE-2022-21662
WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting
Medium
CVE-2022-21663
WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection
High
CVE-2022-21664
WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.