Medium
CVE-2021-25050
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-0209
Mitsol Social Post Feed <= 1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Medium
CVE-2022-0182
Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting
Medium
391ef7e0-d4e6-4c2e-b15e-65bdba190b69
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
Medium
CVE-2021-25014
Ibtana – WordPress Website Builder <= 1.1.4.7 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-22821
Path Traversal in nemo-toolkit
High
ce779d08-93bf-4634-bb83-f5573876e086
Powerkit < 2.5.9 - Cross-Site Request Forgery
High
CVE-2022-23975
AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation
Medium
CVE-2021-24904
Mortgage Calculators WP < 1.53 - Authenticated Stored Cross-Site Scripting
High
59bf14a9-5abe-4b83-9364-d318eedaba83
AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery
Medium
2d7264bc-7fa1-4f5f-a8bc-0840374b7a08
Adaptive Images <= 0.6.68 - Reflected Cross-Site Scripting
High
CVE-2022-21668
Pipenv's requirements.txt parsing allows malicious index url in comments
High
ghsa-5rqg-jm4f-cqx7
Infinite loop causing Denial of Service in colors
Critical
CVE-2022-22817
Arbitrary expression injection in Pillow
Medium
CVE-2022-22816
Out-of-bounds Read in Pillow
Medium
CVE-2022-22815
Improper Initialization in Pillow
High
CVE-2022-22846
dnslib has DNS reply verification issue
Medium
CVE-2022-25606
WP-DownloadManager <= 1.68.6 - Stored Cross-Site Scripting
Medium
CVE-2021-25029
CLUEVO E-Learning Platform <= 1.8.0 - Authenticated Cross-Site Scripting
Medium
CVE-2021-25105
Ivory Search <= 5.4 - Multiple Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-25103
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-0148
All-in-one Floating Contact Form <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-25004
SEUR Oficial < 1.7.2 - Authenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.