CVE-2021-4074

The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the cc_whmcs_bridge_url parameter found in the ~/whmcs-bridge/bridge_cp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1. Due to missing authorization checks on the cc_whmcs_bridge_add_admin function, low-level authenticated users such as subscribers can exploit this vulnerability.

• CWE-79
• CWE-862
• CWE-79

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2653041%40whmcs-bridge&new=2653041%40whmcs-bridge&sfp_email=&sfph_mail=Issue Tracking, Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4074Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2653041%40whmcs-bridge&new=2653041%40whmcs-bridge&sfp_email=&sfph_mail=Issue Tracking, Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4074Third Party Advisory

Published

Jan 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40734Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40735Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40736Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40737Adobe Audition version 14.4 (and earlier) is affected by a N…5.5
• CVE-2021-40738Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40739Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40740Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40741Adobe Audition version 14.4 (and earlier) is affected by an …5.5
• CVE-2021-40742Adobe Audition version 14.4 (and earlier) is affected by a N…5.5
• CVE-2021-40745Adobe Campaign version 21.2.1 (and earlier) is affected by a…7.5
• CVE-2021-4075snipe-it is vulnerable to Server-Side Request Forgery (SSRF)7.2
• CVE-2021-40750Adobe Bridge version 11.1.1 (and earlier) is affected by a N…5.5