Medium
CVE-2021-24478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2021-34623
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24450
ProfilePress <= 3.1.7 - Authenticated Stored Cross-Site Scripting
Medium
2621cb32-3753-42e7-8690-88c680bdf808
Paid Memberships Pro – Restrict Member Access to Content, Courses, Communities – Free or Paid Subscriptions <= 2.5.9.1 - Cross-Site Scripting
Critical
CVE-2021-24442
Poll, Survey, Questionnaire and Voting system <= 1.5.2 - Unauthenticated Blind SQL Injection
High
CVE-2021-24451
Export Users With Meta < 0.6.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-4391
Ultimate Gift Cards for WooCommerce <= 2.1.1 - Cross-Site Request Forgery Bypass
Critical
CVE-2021-24384
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection
Medium
CVE-2021-24369
WordPress Payments Plugin | GetPaid <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Medium
dd7db465-ebeb-477b-b6c8-a9b89ba2372b
MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect
High
370a6130-425c-4264-baaf-8989d3b00d14
MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery
Medium
CVE-2021-24359
The Plus Addons for Elementor Page Builder <= 4.1.10 - Open Redirect
High
CVE-2021-24348
Side Menu – add fixed side buttons <= 3.1.3 - SQL Injection
Critical
30ea46c1-bb29-49b8-b161-e61f13167ff4
Gallery From Files <= 1.60 - Arbitrary File Upload
Medium
24f13f9a-b240-4e32-9f12-117dbe7ecac4
Multivendor Marketplace Solution for WooCommerce <= 3.7.3 - Insecure Direct Object Reference
High
CVE-2021-24340
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
High
CVE-2021-24337
Video Embed <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2021-24313
WP Prayer <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24335
Car Repair Services & Auto Mechanic < 4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24307
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Medium
CVE-2021-24298
Simple Giveaways <= 2.36.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24294
DSGVO All in one for WP <= 3.9 - Unauthenticated Stored Cross-Site Scripting
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
Medium
CVE-2021-24315
GiveWP <= 2.10.3 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.