Medium
CVE-2021-24965
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Low
CVE-2021-36889
tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) <= 1.6 - Cross-Site Scripting
High
CVE-2021-36887
tarteaucitron.js – Cookies legislation & GDPR <= 1.5.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2021-24893
Stars Rating <= 3.5.0 - Denial of Service
High
CVE-2021-24753
Rich Reviews by Starfish <= 1.9.5 - SQL Injection
Medium
CVE-2021-24954
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
Medium
CVE-2021-24955
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-39354
Easy Digital Downloads <= 2.11.2 - Reflected Cross-Site Scripting
Medium
670e92d6-4136-48f1-88d1-69a9fa772a65
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.11.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24697
Simple Download Monitor <= 3.9.4 - Reflected Cross-Site Scripting
Medium
ccd2ef23-23b7-4a32-aeda-41ea9439f166
WP-Recall <= 16.24.47 - Reflected Cross-Site Scripting
High
CVE-2021-42360
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24672
One User Avatar <= 2.3.6 - Stored Cross-Site Scripting
Medium
CVE-2021-24675
One User Avatar <= 2.3.6 - Cross-Site Request Forgery
Medium
CVE-2021-33849
Zoho CRM Lead Magnet <= 1.7.2.4 - Cross-Site Scripting
Medium
c4a649b0-d5b2-4e4c-833c-01ecf12611a5
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
Medium
83d46dce-b218-49ed-85ee-0e8d2a391eb9
Contact Form Entries – Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24435
Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
High
CVE-2021-24522
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Medium
CVE-2021-34660
WP Fusion Lite <= 3.37.18 – Reflected Cross-Site Scripting
Medium
CVE-2021-24471
YouTube Embed <= 5.2.1 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24498
Calendar Event Multi View <= 1.3.99 - Reflected Cross-Site Scripting
High
CVE-2021-32789
WooCommerce Blocks < 5.5 - Authenticated Blind SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.