Low
CVE-2020-7020
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2021-22134
Exposure of Sensitive Information to an Unauthorized Actor
Unrated
drupal-contrib-2021-005
drupal/fac - SA-CONTRIB-2021-005
High
CVE-2021-27291
Pygments vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2021-24203
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24202
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_size
Medium
CVE-2021-24205
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size Parameter
Medium
CVE-2021-24201
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via html_tag
Medium
CVE-2021-24206
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_size
Medium
CVE-2021-24204
Elementor Website Builder <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_html_tag
Medium
04601634-d707-44a7-9b5f-46c4b9687469
BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite
Medium
CVE-2021-4367
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting
Medium
CVE-2021-24187
SEO Redirection Plugin - 301 Redirect Manager <= 6.3 - Reflected Cross-Site Scripting
Medium
5d7bcd71-e299-47fe-a749-e72c49b8129e
BuddyPress - 7.0.0 - 7.2.0 - Insufficient Privilege De-escalation
Medium
CVE-2021-24199
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter
High
CVE-2021-24198
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Data Deletion
Medium
CVE-2021-24200
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter
High
CVE-2021-24197
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Permission Takeover
High
CVE-2021-24209
WP Super Cache <= 1.7.1 - Authenticated (Admin+) Remote Code Execution
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Medium
CVE-2021-28363
Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
High
CVE-2021-24186
Tutor LMS <=1.8.2 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
High
CVE-2021-24182
Tutor LMS <=1.8.2 - SQL Injection via tutor_quiz_builder_get_answers_by_question
Medium
CVE-2021-24181
Tutor LMS – eLearning and online course solution <= 1.7.6 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.