High
CVE-2021-24500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Critical
CVE-2021-34624
ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload
Medium
CVE-2021-24443
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Critical
CVE-2021-34621
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Critical
CVE-2021-34623
User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24450
ProfilePress <= 3.1.7 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-24306
Ultimate Member <= 2.1.19 - Reflected Cross-Site Scripting
Critical
53580b24-c0a7-4578-bb11-5952ebcacc42
UltimateWoo – The Ultimate WooCommerce Plugin with Unlimited Usage <= 0.1.10 - PHP Object Injection
Medium
CVE-2021-24305
Watcheezy Live chat plugin for WordPress <= 2.0 - Stored Cross-Site Scripting
Medium
CVE-2021-24301
Hotjar Connecticator <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24281
Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion
High
3166549e-b52e-41e8-8b5c-1a1a0558c858
BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation
Critical
CVE-2021-24215
Controlled Admin Access <= 1.5.1 - Improper Access Control & Privilege Escalation
Medium
CVE-2021-24199
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter
High
CVE-2021-24161
Responsive Menu <= 4.0.3 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2021-24235
Goto - Tour & Travel WordPress Theme < 2.0 - Reflected Cross-Site Scripting
High
5294af95-e85f-4425-9c4b-0a92dfac4bd1
Digital Climate Strike WP <= 1.0.0 - Malicious Redirect
Critical
CVE-2020-29045
Five Star Restaurant Menu <= 2.2.0 - Unauthenticated Arbitrary Object Deserialization leading to Remote Code Execution
Critical
CVE-2020-12073
Responsive Ready Sites Importer <= 2.2.6 - Unprotected AJAX Actions
Critical
CVE-2020-36837
ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
Medium
CVE-2020-8426
Elementor Website Builder <= 2.8.4 - Reflected Cross-Site Scripting
Medium
ed5cf097-1b27-4d20-b7b2-2aa909bce042
BuddyPress <= 5.1.0 - Denial of Service
Medium
CVE-2019-20042
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.