High
b15b10a4-04fd-4860-9cc9-cefcdbbbf507
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2021-24606
Availability Calendar < 1.2.1 - SQL Injection
Medium
CVE-2021-24604
Availability Calendar <= 1.2.1 - Stored Cross-Site Scripting
Medium
CVE-2021-24599
Email Encoder <= 2.1.1 - Reflected Cross Site Scripting
High
CVE-2021-24579
Bold Page Builder <= 3.1.5 - PHP Object Injection
Medium
CVE-2021-24528
FluentSMTP <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-34638
WordPress Download Manager <= 3.1.24 - Cross-Site Scripting
Medium
CVE-2021-24524
GiveWP <= 2.11.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2021-4347
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
Medium
CVE-2021-24556
Email Subscriber <= 1.1 - Stored Cross-Site Scripting
High
CVE-2021-24555
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2021-24566
WOOCS – Currency Switcher for WooCommerce Professional Free <= 1.3.7 - Authenticated Local File Inclusion
Medium
CVE-2021-34629
SendGrid <= 1.11.8 - Authorization Bypass
High
f8aa8dd6-abff-4c37-98d5-39a924b15651
Charitable – Donation Plugin <= 1.6.50 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24533
Maintenance <= 4.02 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24531
Charitable – Donation Plugin <= 1.6.50 - Authenticated Stored Cross-Site Scripting
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
High
CVE-2021-24410
తెలుగు బైబిల్ వచనములు <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2021-24527
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Medium
CVE-2021-24471
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24362
Photo Gallery <= 1.5.74 - Stored Cross-Site Scripting via Uploaded SVG
Medium
CVE-2021-4384
WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4369
Frontend File Manager <= 18.2 - Unauthenticated Content Injection
Medium
CVE-2021-4351
Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.