Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 209 of 273.
- CVE-2021-24855 Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24854 QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24853 QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
- CVE-2021-24852 MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRF
- CVE-2021-24851 Insert Pages < 3.7.0 - Contributor+ Arbitrary Posts/Pages Access
- CVE-2021-24850 Insert Pages < 3.7.0 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-2485 Other in Trade Management
- CVE-2021-24849 WCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection
- CVE-2021-24848 Mediamatic < 2.8.1 - Subscriber+ SQL Injection
- CVE-2021-24847 SEO Redirection < 8.2 - Subscriber+ SQL Injection
- CVE-2021-24846 Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection
- CVE-2021-24845 Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages Access
- CVE-2021-24844 Affiliate Manager < 2.8.7 - Admin+ SQL injection
- CVE-2021-24843 SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF
- CVE-2021-24842 Bulk Datetime Change < 1.12 - Missing Authorisation
- CVE-2021-24841 Helpful < 4.4.59 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24840 Squaretype Modern Blog < 3.0.4 - Unauthenticated Private/Schedule Posts Disclosure
- CVE-2021-2484 Other in Operations Intelligence
- CVE-2021-24839 SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion
- CVE-2021-24838 AnyComment < 0.3.5 - Open Redirect
- CVE-2021-24837 Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24836 Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings Update
- CVE-2021-24835 WCFM - Frontend Manager for WooCommerce < 6.5.12 - Customer/Subscriber+ SQL Injection
- CVE-2021-24834 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module
- CVE-2021-24833 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
- CVE-2021-24832 WP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRF
- CVE-2021-24831 Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls
- CVE-2021-24830 Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
- CVE-2021-2483 Other in Content Manager
- CVE-2021-24829 Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injection
- CVE-2021-24828 Mortgage Calculator / Loan Calculator < 1.5.17 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24827 Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
- CVE-2021-24826 Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site Scripting
- CVE-2021-24825 Custom Content Shortcode < 4.0.2 - Authenticated Arbitrary File Access / LFI
- CVE-2021-24824 Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata Access
- CVE-2021-24823 Support Board < 3.3.6 - Arbitrary File Deletion via CSRF
- CVE-2021-24822 Stylish Cost Calculator < 7.04 - Subscriber+ Unauthorised AJAX Calls to Stored XSS
- CVE-2021-24821 Cost Calculator < 1.6 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24820 Cost Calculator <= 1.6 - Authenticated Local File Inclusion
- CVE-2021-2482 Other in Payables
- CVE-2021-24819 Page/Post Content Shortcode <= 1.0 - Contributor+ Arbitrary Posts/Pages Access
- CVE-2021-24818 WP Limits <= 1.0 - Plugin's Settings Update via CSRF
- CVE-2021-24817 Ultimate NoFollow <= 1.4.8 - Contributor+ Stored Cross-Site Scripting
- CVE-2021-24816 Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File Renaming
- CVE-2021-24815 Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24814 WordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting
- CVE-2021-24813 Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24812 BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24811 Shop Page WP < 1.2.8 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24810 WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
- CVE-2021-2481 Denial of service in MySQL Server
- CVE-2021-24809 BP Better Messages < 1.9.9.41 - Multiple CSRF
- CVE-2021-24808 BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting
- CVE-2021-24807 Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting
- CVE-2021-24806 wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF
- CVE-2021-24805 DW Question & Answer Pro <= 1.3.4 - Multiple CSRF
- CVE-2021-24804 Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRF
- CVE-2021-24803 Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF
- CVE-2021-24802 Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRF
- CVE-2021-24801 WP Survey Plus <= 1.0 - Subscriber+ AJAX Calls
- CVE-2021-24800 DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR
- CVE-2021-2480 Other in HTTP Server
- CVE-2021-24799 Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
- CVE-2021-24798 WP Header Images < 2.0.1 - Reflected Cross-Site Scripting
- CVE-2021-24797 Tickera < 3.4.8.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-24796 My Tickets < 1.8.31 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-24795 Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF
- CVE-2021-24794 Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24793 WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24792 Shiny Buttons <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
- CVE-2021-24791 Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections
- CVE-2021-24790 Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX Calls
- CVE-2021-2479 Denial of service in MySQL Server
- CVE-2021-24789 Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24788 Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts
- CVE-2021-24787 Client Invoicing by Sprout Invoices < 19.9.7 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24786 Download Monitor < 4.4.5 - Admin+ SQL Injection
- CVE-2021-24785 Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24784 WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRF
- CVE-2021-24783 Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule Deletion
- CVE-2021-24782 Flex Local Fonts <= 1.0.0 - Admin+ Stored Cross-Site-Scripting
- CVE-2021-24781 Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value Change
- CVE-2021-24780 Single Post Exporter <= 1.1.1 - Plugin's Settings Update via CSRF
- CVE-2021-2478 Denial of service in MySQL Server
- CVE-2021-24779 WP Debugging < 2.11.0 - Unauthenticated Plugin's Settings Update
- CVE-2021-24778 Tradetracker-Store < 4.6.60 - Admin+ SQL Injection
- CVE-2021-24777 Hotscot Contact Form < 1.3 - Admin+ SQL Injection
- CVE-2021-24776 WP Performance Score Booster < 2.1 - Settings Change via CSRF
- CVE-2021-24775 Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure
- CVE-2021-24774 Check & Log Email < 1.0.3 - Admin+ SQL Injections
- CVE-2021-24773 WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24772 Stream < 3.8.2 - Admin+ SQL Injection
- CVE-2021-24771 Inspirational Quote Rotator <= 1.0.0 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24770 Stylish Price List < 6.9.1 - Subscriber+ Arbitrary Image Upload
- CVE-2021-2477 Denial of service in Applications Framework
- CVE-2021-24769 Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection
- CVE-2021-24768 WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site Scripting
- CVE-2021-24767 Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF
- CVE-2021-24766 404 to 301 < 3.0.9 - Logs Deletion via CSRF
- CVE-2021-24765 Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting