Medium
CVE-2021-24977
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-0345
Better Notifications for WP <= 1.8.6 - Email Address Disclosure
Medium
CVE-2022-0380
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
High
CVE-2022-23988
WS Form LITE and WS Form Pro < 1.8.176 - Stored Cross-Site Scripting
Medium
CVE-2022-23987
WS Form LITE and Pro < 1.8.176 - Stored Cross-Site Scripting
Medium
CVE-2021-24913
Logo Showcase with Slick Slider <= 2.0 - Cross-Site Request Forgery
Critical
CVE-2022-1165
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing
High
CVE-2022-0411
Asgaros Forum < 2.0.0 - SQL Injection
Medium
CVE-2021-25034
WP User – Custom Registration Forms, Login and User Profile < 7.0 - Reflected Cross-Site Scripting
Critical
CVE-2021-25010
Post Snippets <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-25042
WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2022-0385
Crazy Bone <= 0.6.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24994
Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-0339
Server-Side Request Forgery in calibreweb
High
CVE-2022-0273
Incorrect Authorization in calibreweb
High
CVE-2022-24124
The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.
Medium
CVE-2022-0395
Cross-site Scripting in LiveHelperChat
Medium
ghsa-8w54-22w9-3g8f
Cross-site Scripting and Open Redirect in Products.CMFPlone
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
Medium
CVE-2022-23598
Cross-site Scripting when rendering error messages in laminas-form
Medium
CVE-2022-0387
Cross-site Scripting in livehelperchat
Medium
CVE-2022-0370
Cross-site Scripting in livehelperchat
Medium
CVE-2022-0374
Cross-site Scripting in livehelperchat
Medium
CVE-2022-0375
Cross-site Scripting in livehelperchat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.