2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-24271 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cro... |
| CVE-2021-24270 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scr... |
| CVE-2021-24269 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cros... |
| CVE-2021-24268 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Sit... |
| CVE-2021-24267 | MEDIUM | 5.4 | 0.7% | May 5, 2021 | The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable... |
| CVE-2021-24266 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable... |
| CVE-2021-24265 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cros... |
| CVE-2021-24264 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cros... |
| CVE-2021-24263 | MEDIUM | 5.4 | 0.7% | May 5, 2021 | The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets ... |
| CVE-2021-24262 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable t... |
| CVE-2021-24261 | MEDIUM | 5.4 | 0.7% | May 5, 2021 | The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vu... |
| CVE-2021-24260 | MEDIUM | 5.4 | 0.7% | May 5, 2021 | The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-... |
| CVE-2021-24259 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Elementor Addon Elements” WordPress Plugin before 1.11.2 has several widgets that are vulnerable to stored Cross-Si... |
| CVE-2021-24258 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable t... |
| CVE-2021-24257 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross... |
| CVE-2021-24256 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to ... |
| CVE-2021-24255 | MEDIUM | 5.4 | 0.6% | May 5, 2021 | The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cros... |
| CVE-2021-29489 | MEDIUM | 5.4 | 0.9% | May 5, 2021 | Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options str... |
| CVE-2021-20397 | MEDIUM | 6.1 | 0.7% | May 5, 2021 | IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2021-20254 | MEDIUM | 6.8 | 1.6% | May 5, 2021 | A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids... |
| CVE-2021-29250 | MEDIUM | 5.4 | 0.5% | May 5, 2021 | BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products... |
| CVE-2021-29248 | MEDIUM | 5.3 | 0.8% | May 5, 2021 | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set th... |
| CVE-2021-29247 | MEDIUM | 5.3 | 1.2% | May 5, 2021 | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set th... |
| CVE-2021-29246 | MEDIUM | 6.7 | 1.5% | May 5, 2021 | BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achiev... |
| CVE-2021-29245 | MEDIUM | 5.3 | 0.9% | May 5, 2021 | BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now