High
CVE-2021-24224
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2021-24227
Patreon WordPress < 1.7.0 - Local File Disclosure
Critical
CVE-2021-24220
Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload
Medium
CVE-2021-24213
GiveWP 2.4.0 - 2.9.7 - Reflected Cross Site Scripting
Medium
CVE-2021-24211
WordPress Related Posts <= 3.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24210
PhastPress <= 1.110 - Open Redirect
Medium
CVE-2021-24203
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24202
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size
Medium
CVE-2021-24205
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter
Medium
CVE-2021-24201
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24206
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size
Medium
CVE-2021-24204
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag
Medium
CVE-2021-24199
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter
Medium
CVE-2021-24200
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter
High
CVE-2021-24209
WP Super Cache <= 1.7.1 - Authenticated (Admin+) Remote Code Execution
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
High
CVE-2021-24186
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
High
CVE-2021-24295
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.153.3 - Unauthenticated Blind SQL Injection
High
CVE-2021-20678
Paid Memberships Pro <= 2.5.5 - Authenticated SQL Injection
Medium
CVE-2021-24170
User Profile Picture <= 2.4.0 - Sensitive Information Disclosure
Medium
CVE-2021-4422
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-4414
Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
High
86c1b729-e8fe-46e8-8d57-c6312087c6b2
Under Construction, Coming Soon & Maintenance Mode <= 1.1.1 - Server Side Request Forgery
Medium
5f6b88fb-1070-427b-a51f-23fbede3dd59
Under Construction, Coming Soon & Maintenance Mode <= 1.1.1 - Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.