Medium
CVE-2021-24514
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
36ae359b-7694-4e8b-9fe6-5e9e40345305
WooCommerce Product Table Lite <= 2.4.0 - Reflected Cross-Site Scripting
High
CVE-2021-24769
Permalink Manager Lite <= 2.2.12 - Admin+ SQL Injection
Medium
CVE-2021-24689
Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Authenticated (Admin+) Arbitrary System File Read
Medium
CVE-2021-24744
Cimatti Contact Forms <= 1.4.11 - Cross-Site Scripting
Critical
CVE-2020-28271
Prototype Pollution in deephas
Medium
e93ad115-1a0b-4d33-b89f-13e39508c9b0
Careerfy <= 7.0 - Cross-Site Request Forgery and Missing Authorization
High
CVE-2021-4358
WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-38153
Observable Discrepancy in Apache Kafka
Medium
ghsa-65p7-pjj8-ggmr
Member account takeover
Critical
CVE-2021-31819
Remote Code Execution in Halibut
Critical
CVE-2021-4436
3DPrint Lite < 1.9.1.5 - Arbitrary File Upload
High
CVE-2021-4227
ark-commenteditor <= 2.15.6 - iframe Injection
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36823
Absolutely Glamorous Custom Admin <= 6.8 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36873
WordPress iQ Block Country <= 1.2.11 - Authenticated Stored Cross-Site Scripting
High
CVE-2021-41086
Clipboard-based XSS
Medium
CVE-2021-23443
Cross-site Scripting in edge.js
Medium
CVE-2021-23444
Prototype Pollution in jointjs
Medium
ghsa-m489-xr35-fjxr
Regular Expression Denial of Service in millisecond
High
CVE-2020-23478
Regular Expression Denial of Service in Leo Editor
High
CVE-2021-41084
Response Splitting from unsanitized headers
Medium
CVE-2019-5444
Path Traversal in serve-here.js
Medium
ghsa-8r4g-cg4m-x23c
Denial of Service in node-static
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.