2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37414 | HIGH | 7.5 | 5.3% | Sep 10, 2021 | Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication. |
| CVE-2021-40373 | CRITICAL | 9.8 | 4.7% | Sep 10, 2021 | playSMS before 1.4.5 allows Arbitrary Code Execution by entering PHP code at the #tabs-information-page of core_main_con... |
| CVE-2021-38360 | CRITICAL | 9.8 | 2.2% | Sep 10, 2021 | The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in... |
| CVE-2021-38359 | MEDIUM | 6.1 | 0.8% | Sep 10, 2021 | The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Sit... |
| CVE-2021-38358 | MEDIUM | 6.1 | 0.8% | Sep 10, 2021 | The MoolaMojo WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the classes parameter found in the ~/... |
| CVE-2021-38357 | MEDIUM | 6.1 | 0.8% | Sep 10, 2021 | The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the ~/s... |
| CVE-2021-38355 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter fo... |
| CVE-2021-38354 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The GNU-Mailman Integration WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the gm_error parameter ... |
| CVE-2021-38353 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Dropdown and scrollable Text WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the content parame... |
| CVE-2021-38352 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_ms... |
| CVE-2021-38351 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The OSD Subscribe WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the osd_subscribe_message paramet... |
| CVE-2021-38350 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The spideranalyse WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the date parameter found in the ~... |
| CVE-2021-38349 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Integration of Moneybird for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the er... |
| CVE-2021-38348 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Advance Search WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the wpas_id parameter found in t... |
| CVE-2021-38347 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Custom Website Data WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter found in t... |
| CVE-2021-38341 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The WooCommerce Payment Gateway Per Category WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a r... |
| CVE-2021-38340 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Wordpress Simple Shop WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the update_row parameter ... |
| CVE-2021-38339 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Simple Matted Thumbnails WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVE... |
| CVE-2021-38338 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `f` and `t` parameter fo... |
| CVE-2021-38337 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SE... |
| CVE-2021-38336 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Edit Comments XT WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_S... |
| CVE-2021-38335 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The Wise Agent Capture Forms WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVE... |
| CVE-2021-38334 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The WP Design Maps & Places WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the filename parameter ... |
| CVE-2021-38333 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The WP Scrippets WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"... |
| CVE-2021-38332 | MEDIUM | 6.1 | 0.9% | Sep 10, 2021 | The On Page SEO + Whatsapp Chat Button Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a ... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now