Medium
CVE-2021-24902
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-24969
WordPress Download Manager <= 3.2.21 - Cross-Site Scripting
Medium
79ff583b-f18a-4e04-9c23-9d3a4eca8c6b
WP Mail Logging < 1.10.0 - Unauthenticated Arbitrary Settings Change
Medium
769fbe66-fcf5-4b16-8cc3-7c9bc561257a
The WP Remote WordPress Plugin <= 4.64 - Reflected Cross-Site Scripting
Medium
CVE-2021-25009
CorreosExpress <= 2.6.0 - Sensitive Data Exposure
High
CVE-2021-24967
Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24988
WP RSS Aggregator <= 4.19.2 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2021-42365
Asgaros Forums <= 1.15.13 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-42364
Stetic <= 1.0.6 Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-24753
Rich Reviews by Starfish <= 1.9.5 - SQL Injection
Medium
CVE-2021-24992
Buttonizer - Smart Floating Action Button <= 2.5.4 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-25007
MOLIE <= 0.5 - SQL Injection
Medium
CVE-2021-38356
NextScripts: Social Networks Auto-Poster <= 4.3.20 - Reflected Cross-Site Scripting
Medium
CVE-2021-23654
Improper Neutralization of Formula Elements in a CSV File in html-2-csv
Medium
CVE-2021-36919
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-20841
EC-CUBE Improper access control in Management screen
High
CVE-2021-20851
Browser and Operating System Finder <= 1.1 - Cross-Site Request Forgery
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40829
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-40828
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41270
CSV Injection in symfony/serializer
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41268
Cookie persistence after password changes in symfony/security-bundle
Critical
ghsa-r64m-qchj-hrjp
Webcache Poisoning in shopware/platform and shopware/core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.