High
CVE-2021-22968
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2021-22053
Code injection in spring-cloud-netflix-hystrix-dashboard
Critical
CVE-2021-3943
Moodle vulnerable to RCE via unsafe deserialization
Medium
CVE-2021-43558
Cross-site Scripting in moodle
Medium
CVE-2021-24984
WPFront User Role Editor <= 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24996
IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24980
Gwolle Guestbook <= 4.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-24979
Paid Memberships Pro <= 2.6.5 - Reflected Cross-Site Scripting
Medium
6338620f-925a-4226-9557-313a7f8a6b6a
WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting
Medium
CVE-2021-24895
Cybersoldier < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24995
HTML5 Responsive FAQ <= 2.8.5 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-24797
Tickera <= 3.4.8.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-24846
Ni WooCommerce Custom Order Status <= 1.9.6 - SQL Injection
Medium
CVE-2021-24907
Everest Forms <= 1.7.9 - Reflected Cross-Site Scripting
High
a7e24341-b085-4412-aa7b-42712cd94f35
Simple Slider < 1.1 - Reflected Cross-Site Scripting
High
8af26db8-5cae-45ba-9573-2bc4e885de81
Kudos Donations – Easy donations and payments with Mollie < 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2015-9434
Logo Carousel < 1.7.2 - Stored Cross-Site Scripting
Medium
CVE-2021-24956
Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24738
Logo Carousel <= 3.4.1 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-24739
Logo Carousel <= 3.4.1 - Unauthorised Private Post Access
High
CVE-2021-4208
ExportFeed <= 2.0.1.0 - SQL Injection
Critical
CVE-2021-24849
WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2021-24997
WP Guppy < 1.3 - Information Disclosure
Medium
CVE-2021-24941
Icegram <= 2.0.4 - Reflected Cross-Site Scripting via message_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.