High
CVE-2021-24981
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24578
SportsPress <= 2.7.8 - Reflected Cross-Site Scripting
Critical
CVE-2021-4455
Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload
Low
ghsa-wmpv-c2jp-j2xg
ERC1155Supply vulnerability in OpenZeppelin Contracts
Critical
CVE-2021-41269
Critical vulnerability found in cron-utils
Low
CVE-2021-3938
snipe-it is vulnerable to Cross-site Scripting
Medium
CVE-2021-3932
twill is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3931
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3921
firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
High
CVE-2021-3915
bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-41038
Improper Verification of Communication Channel in @theia/plugin-ext
Medium
CVE-2021-43561
Cross-site Scripting in pegasus/google-for-jobs
High
CVE-2021-43564
Unrestricted access to predictable file paths in hov/jobfair
Medium
CVE-2021-24795
Filter Portfolio Gallery <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2021-24756
WP System Log < 1.0.21 - Cross-Site Scripting
Medium
CVE-2021-24954
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
Medium
CVE-2021-24818
Wp Limits <= 1.0 - Cross-Site Request Forgery
Critical
CVE-2021-24863
WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots < 6.67 - Unauthenticated SQL Injection
Medium
CVE-2021-24901
Security Audit <= 1.0.0 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2021-24792
Shiny Buttons – CSS3 Button Generator for WordPress <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24817
Ultimate NoFollow <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.