2021 CVE Vulnerabilities

23,473 CVEs published in 2021.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2021-4409MEDIUM4.3The WooCommerce Etsy Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and...
CVE-2021-4408MEDIUM4.3The DW Question & Answer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi...
CVE-2021-4407MEDIUM4.3The Custom Banners plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3....
CVE-2021-42083MEDIUM5.4An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager...
CVE-2021-42079MEDIUM4.9An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively w...
CVE-2021-39014MEDIUM5.4IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed...
CVE-2021-33798MEDIUM6.5A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial...
CVE-2021-4405MEDIUM4.3The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5....
CVE-2021-4404MEDIUM4.3The Event Espresso 4 Decaf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu...
CVE-2021-4403MEDIUM4.3The Remove Schema plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5...
CVE-2021-4402MEDIUM4.3The Multiple Roles plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1....
CVE-2021-4400MEDIUM4.3The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5...
CVE-2021-4398MEDIUM4.3The Amministrazione Trasparente plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and ...
CVE-2021-4397MEDIUM4.3The Staff Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu...
CVE-2021-4396MEDIUM4.3The Rucy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.4.4. This ...
CVE-2021-4395MEDIUM6.5The Abandoned Cart Recovery for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions...
CVE-2021-4394MEDIUM4.3The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. ...
CVE-2021-4393MEDIUM4.3The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in v...
CVE-2021-4392MEDIUM4.3The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in v...
CVE-2021-4391MEDIUM4.3The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up ...
CVE-2021-4390MEDIUM4.3The Contact Form 7 Style plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi...
CVE-2021-4389MEDIUM4.3The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6. ...
CVE-2021-4388MEDIUM5.3The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, ...
CVE-2021-4386MEDIUM4.3The WP Security Question plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi...
CVE-2021-4385MEDIUM4.3The WP Private Content Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now