High
CVE-2021-24575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2021-24631
Unlimited PopUps <= 4.5.3 - Authenticated (Admin+) SQL Injection
High
CVE-2021-24829
Visitor Traffic Real Time Statistics <= 3.8 - Subscriber+ SQL Injection
Medium
CVE-2021-25118
Yoast SEO <= 17.2 - Full Path Disclosure
High
9699118a-e12f-491f-b464-51129888fb1a
Two Way Chat <= 3.1.4 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24695
Simple Download Monitor <= 3.9.5 - Sensitive Data Exposure
Medium
CVE-2021-24788
Batch Cat <= 0.3 - Missing Authorization
Medium
CVE-2021-24698
Simple Download Monitor <= 3.9.5 - Contributor+ Arbitrary Thumbnail Removal
Critical
CVE-2021-24693
Simple Download Monitor <= 3.9.4 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
High
CVE-2021-24809
BP Better Messages <= 1.9.9.37 - Cross-Site Request Forgery
High
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-24808
BP Better Messages <= 1.9.9.37 - Reflected Cross-Site Scripting
Medium
CVE-2021-24539
Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 1.6.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-39342
Credova_Financial <= 1.4.8 - Sensitive Information Disclosure
Critical
CVE-2021-24757
Stylish Price List < 6.9.0 - Arbitrary Image Upload
Medium
CVE-2021-24793
WPeMatico RSS Feed Fetcher <= 2.6.11 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-24770
Stylish Price List <= 6.9.0 - Missing Authorization
High
CVE-2021-24717
AutomatorWP <= 1.7.5 - Privilege Escalation
Medium
CVE-2021-24381
Ninja Forms <= 3.5.8.1 - Cross-Site Scripting
High
CVE-2021-24774
Check & Log Email <= 1.0.2 - Admin+ SQL Injection via Order and OrderBy parameters
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-34648
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Medium
CVE-2021-34647
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
High
CVE-2021-24655
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.