Critical
CVE-2021-24949
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2021-24948
The Plus Addons for Elementor Pro <= 5.0.6 - Sensitive Data Disclosure
Medium
CVE-2021-25027
PowerPack Addons for Elementor <= 2.6.1 - Reflected Cross-Site Scripting
High
CVE-2021-24967
Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-25079
Contact Form Entries <= 1.2.3 - Reflected Cross-Site Scripting
Medium
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
High
CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-4445
Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Medium
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
c4a649b0-d5b2-4e4c-833c-01ecf12611a5
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
Medium
83d46dce-b218-49ed-85ee-0e8d2a391eb9
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Medium
11e97adc-b402-4d82-ae39-4dccbd70bcf2
Elementor Addon Elements <= 1.11.7 - Cross-Site Request Forgery
High
9bb9bab2-4f47-41ed-b42e-5272981927a8
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass
Medium
CVE-2021-24351
The Plus Addons for Elementor Page Builder <= 4.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2021-24359
The Plus Addons for Elementor Page Builder <= 4.1.10 - Open Redirect
Medium
CVE-2021-24358
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
High
CVE-2021-4447
Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2021-4446
Essential Addons for Elementor <= 4.6.4 - Missing Authorization
Medium
CVE-2021-24292
Happy Addons for Elementor <= 2.23.0 & Pro Version < 1.17.0 - Stored Cross-Site Scripting
Medium
CVE-2021-24273
Clever Addons for Elementor <=2.0.15 - Stored Cross-Site Scripting
Medium
CVE-2021-4332
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2021-4331
The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2021-24255
Essential Addons for Elementor Lite <= 4.5.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.