High
CVE-2021-41117
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-36826
WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-42134
Cross-site Scripting in django-unicorn
Medium
CVE-2021-24783
Post Expirator <= 2.5.1 - Contributor+ Arbitrary Post Schedule Deletion
Critical
CVE-2021-24731
Pie Register <= 3.7.1.5 - Unauthenticated SQL Injection
Medium
CVE-2021-24806
Comments - wpDiscuz <= 7.3.3 - Arbitrary Comment Addition/Edition/Deletion by Cross-Site Request Forgery
Medium
CVE-2021-24766
404 to 301 <= 3.0.8 - Logs Deletion via Cross-Site Request Forgery
High
CVE-2021-24537
Similar Posts <= 3.1.5 - Admin+ Arbitrary PHP Code Execution
Medium
CVE-2021-24840
Squaretype - Modern Blog WordPress Theme < 3.0.4 - Authorization Bypass
Medium
b924261f-1e1a-4565-a22e-ba592912d270
YITH WooCommerce Multi Vendor <= 3.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-24607
Storefront Footer Text <= 1.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24844
Affiliate Manager <= 2.8.6 - Admin+ SQL injection
Medium
CVE-2021-24706
Qwizcards <= 3.61 - Stored Cross-Site Scripting
Medium
CVE-2021-24664
School Management System – WPSchoolPress <= 2.1.16 - Stored Cross-Site Scripting
Critical
CVE-2025-34077
Pie Register <= 3.7.1.4 - Authentication Bypass
Medium
CVE-2021-24710
Print-O-Matic <= 2.0.2 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24575
School Management System – WPSchoolPress <= 2.1.9 - SQL Injection
Medium
77fd0714-ae9d-4136-beed-7f37b1266dc9
iPages Flipbook < 1.4.3 - Reflected Cross-Site Scripting
High
CVE-2021-24835
WCFM - Frontend Manager for WooCommerce <= 6.5.11 - Customer/Subscriber+ SQL Injection
Medium
5e618864-e862-4d4f-aa28-3e2fb78882fc
iPanorama 360 WordPress Virtual Tour Builder < 1.6.22 - Reflected Cross-Site Scripting
High
58a83ec8-e294-4fb6-9f1a-19562b2e499d
School Management System – WPSchoolPress < 2.1.10 - Reflected Cross-Site Scripting
High
CVE-2021-24832
WP SEO Redirect 301 <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2021-24701
Quiz Tool Lite <= 2.3.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24721
Loco Translate <= 2.5.3 - Authenticated PHP Code Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.