Medium
CVE-2021-32854
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,596
Medium
CVE-2021-32856
Microweber Cross-site Scripting vulnerability
Medium
CVE-2021-32853
Erxes vulnerable to Cross-site Scripting
Medium
CVE-2021-32851
Mind-elixir Cross-site Scripting vulnerability
Medium
CVE-2021-32850
@claviska/jquery-minicolors vulnerable to Cross-site Scripting
Medium
fdd57b3b-bd0a-4b07-831e-72f2329b2577
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'instantEditRedirect' function
Medium
CVE-2023-25972
Старт <= 3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
f347a629-523e-4ec4-ad56-6ae9357dd7f5
Redirect Redirection <= 1.1.3 - Missing Authorization in 'saveRedirectSettings' function
Medium
CVE-2023-26014
Minify HTML <= 2.1.7 - Cross-Site Request Forgery in minify_html_menu_options
Medium
ef5f99ca-8a0d-4ec4-8b59-c0c4637dfbc3
Redirect Redirection <= 1.1.3 - Missing Authorization in 'statusBulkEdit' function
High
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
e29dac44-5c85-4f73-ae96-4bc0deca64f4
Redirect Redirection <= 1.1.3 - Missing Authorization in 'bulkDelete' function
Medium
CVE-2023-26013
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
de69d597-b663-4c58-82e0-c90391fb8416
Redirect Redirection <= 1.1.3 - Missing Authorization in 'selectAll' function
Medium
dceca4ee-6587-4eaa-974e-a21e7a10b6e8
Redirect Redirection <= 1.1.3 - Missing Authorization in 'logPageContent' function
Medium
d4dacd15-85cc-41f5-830c-b02c85c798f9
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'cronLogDeleteOption' function
Medium
CVE-2023-0175
Smart Logo Showcase Lite <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
d433a5b3-4661-4246-ae60-8a99633372ad
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'deleteRedirect' function
Medium
d0d6f467-6e62-45ff-bf9d-4db5b1ed1dd2
Redirect Redirection <= 1.1.3 - Missing Authorization in 'logFilter' function
Medium
c3319993-6f2c-425d-8cb2-ab26f7a52139
Client Portal <= 1.1.8 - Cross-Site Request Forgery via cp_create_private_pages_for_all_users
Medium
CVE-2023-0942
Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting
Medium
b57dd8e3-e3e1-4d6b-b9dd-b5a24c4886b4
Redirect Redirection <= 1.1.3 - Missing Authorization in 'addRedirectRule' function
Medium
b2ec7d77-fe50-4bb2-a57b-6ee4246805f9
Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadSettings' function
Medium
a7ec331c-51ea-466a-ab7b-4234df47114a
Redirect Redirection <= 1.1.3 - Missing Authorization in 'liveSearch' function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.