Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 216 of 273.
- CVE-2021-24201 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element
- CVE-2021-24200 wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter
- CVE-2021-2420 Denial of service in Outside In Technology
- CVE-2021-24199 wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter
- CVE-2021-24198 wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion
- CVE-2021-24197 wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover
- CVE-2021-24196 Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)
- CVE-2021-24195 Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24194 Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24193 Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24192 Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24191 WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24190 WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-2419 Denial of service in Outside In Technology
- CVE-2021-24189 Missing authorization in Captchinoo, Google recaptcha for admin login page
- CVE-2021-24188 WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege User
- CVE-2021-24187 SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)
- CVE-2021-24186 Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
- CVE-2021-24185 Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating
- CVE-2021-24184 Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation
- CVE-2021-24183 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form
- CVE-2021-24182 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question
- CVE-2021-24181 Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct
- CVE-2021-24180 Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
- CVE-2021-2418 Denial of service in MySQL Server
- CVE-2021-24179 Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE
- CVE-2021-24178 Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS
- CVE-2021-24177 WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
- CVE-2021-24176 JH 404 Logger <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
- CVE-2021-24175 The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
- CVE-2021-24174 Database Backups <= 1.2.2.6 - CSRF to Backup Download
- CVE-2021-24173 VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)
- CVE-2021-24172 VM Backups <= 1.0 - CSRF to Database Backup Download
- CVE-2021-24171 WooCommerce Upload Files < 59.4 - Unauthenticated Arbitrary File Upload
- CVE-2021-24170 User Profile Picture < 2.5.0 - Sensitive Information Disclosure
- CVE-2021-2417 Other in MySQL Server
- CVE-2021-24169 Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)
- CVE-2021-24168 Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)
- CVE-2021-24167 Web-Stat < 1.4.1 - API Key Disclosure
- CVE-2021-24166 Ninja Forms < 3.4.34 - CSRF to OAuth Service Disconnection
- CVE-2021-24165 Ninja Forms < 3.4.34 - Administrator Open Redirect
- CVE-2021-24164 Ninja Forms < 3.4.34.1 - Authenticated OAuth Connection Key Disclosure
- CVE-2021-24163 Ninja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key Disclosure
- CVE-2021-24162 Responsive Menu < 4.0.4 - CSRF to Settings Update
- CVE-2021-24161 Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload
- CVE-2021-24160 Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload
- CVE-2021-2416 Denial of service in Communications Session Border Controller
- CVE-2021-24159 Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2021-24158 Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Privilege Escalation
- CVE-2021-24157 Orbit Fox by ThemeIsle < 2.10.3 - Authenticated Stored Cross Site Scripting
- CVE-2021-24156 Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting
- CVE-2021-24155 Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload
- CVE-2021-24154 Theme Editor < 2.6 - Authenticated Arbitrary File Download
- CVE-2021-24153 Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
- CVE-2021-24152 Popup Builder < 3.74 - Authenticated Reflected Cross-Site Scripting (XSS)
- CVE-2021-24151 WP Editor < 1.2.7 - Authenticated SQL injection
- CVE-2021-24150 Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF
- CVE-2021-2415 Other in Time and Labor
- CVE-2021-24149 Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection
- CVE-2021-24148 MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
- CVE-2021-24147 Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)
- CVE-2021-24146 Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
- CVE-2021-24145 Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
- CVE-2021-24144 Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
- CVE-2021-24143 AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
- CVE-2021-24142 301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection
- CVE-2021-24141 Advanced Database Cleaner < 3.0.2 - Authenticated SQL injection
- CVE-2021-24140 Ajax Load More < 5.3.2 - Authenticated SQL Injection
- CVE-2021-2414 Other in Communications Session Border Controller
- CVE-2021-24139 Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection
- CVE-2021-24138 AdRotate < 5.8.4 - Authenticated SQL Injection
- CVE-2021-24137 Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection
- CVE-2021-24136 Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
- CVE-2021-24135 WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS
- CVE-2021-24134 Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS
- CVE-2021-24133 ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings
- CVE-2021-24132 Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection
- CVE-2021-24131 Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections
- CVE-2021-24130 WP Google Map Plugin < 4.1.5 - Authenticated SQL Injection
- CVE-2021-24129 Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting
- CVE-2021-24128 Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
- CVE-2021-24127 ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
- CVE-2021-24126 Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
- CVE-2021-24125 Contact Form Submissions < 1.7.1 - Authenticated SQL Injection
- CVE-2021-24124 WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)
- CVE-2021-24123 PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
- CVE-2021-24122 Apache Tomcat information disclosure
- CVE-2021-2412 Denial of service in MySQL Server
- CVE-2021-24119 Information disclosure in arm:mbed tls
- CVE-2021-24117 Information disclosure in apache:teaclave sgx sdk
- CVE-2021-24116 Information disclosure in wolfssl:wolfssl
- CVE-2021-24115 Weak cryptography in botan project:botan
- CVE-2021-24114 Microsoft Teams iOS Information Disclosure Vulnerability
- CVE-2021-24113 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2021-24112 .NET Core Remote Code Execution Vulnerability
- CVE-2021-24111 .NET Framework Denial of Service Vulnerability
- CVE-2021-24110 HEVC Video Extensions Remote Code Execution Vulnerability
- CVE-2021-2411 Denial of service in MySQL Cluster
- CVE-2021-24109 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
- CVE-2021-24108 Microsoft Office Remote Code Execution Vulnerability