High
CVE-2021-27644
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2020-11476
Unrestricted Uploads in Concrete5
Medium
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
High
c70ed02e-1183-475b-a110-4a2d8dbe610e
Nitro by WooRockets <= 1.7.9 - Missing Authorization to Arbitrary Plugin Installation
Medium
c63079af-6a22-4692-ab81-96e166a00c38
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change
Medium
CVE-2022-0142
Visual Form Builder <= 3.0.5 - CSV Injection
Medium
CVE-2021-24935
WP Google Fonts <= 3.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-0140
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure
Medium
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Critical
CVE-2020-36378
Vulnerability in packageCmd function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36379
Vulnerability in remove function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36377
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36376
Vulnerability in list function leads to arbitrary code execution via filePath parameters
Medium
CVE-2021-24714
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
Medium
35b9f37c-69e1-437a-97dd-3d3e7a8cd86e
Ivory Search <= 4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24718
Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder < 1.5 - Cross-Site Scripting
Medium
CVE-2021-44777
Email Tracker <= 5.2.6 - Cross-Site Request Forgery
High
CVE-2020-26705
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via
Critical
CVE-2020-25911
XML External Entity vulnerability in MODX CMS
Critical
CVE-2020-36381
Vulnerability in singleCrunch function leads to arbitrary code execution via filePath parameters
Critical
CVE-2020-36380
Vulnerability in crunch function leads to arbitrary code execution via filePath parameters
High
CVE-2021-41189
Communities and collections administrators can escalate their privilege up to system administrator
Medium
CVE-2021-3904
Cross-Site Scripting in grav
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.