2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-37708 | CRITICAL | 9.8 | 2.4% | Aug 16, 2021 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in ma... |
| CVE-2021-21861 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-21860 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-21859 | HIGH | 8.8 | 1.6% | Aug 16, 2021 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on A... |
| CVE-2021-38315 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The SP Project & Document Manager WordPress plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via t... |
| CVE-2021-37707 | HIGH | 7.5 | 0.9% | Aug 16, 2021 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulatio... |
| CVE-2021-34667 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Calendar_plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of `$_SERVER['PHP_SE... |
| CVE-2021-34666 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the ~/wp_sideb... |
| CVE-2021-34665 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The WP SEO Tags WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the saq_txt_the_filter parameter in... |
| CVE-2021-34664 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Moova for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the lat parameter in the ... |
| CVE-2021-34663 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The jQuery Tagline Rotator WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['... |
| CVE-2021-34659 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `email` param... |
| CVE-2021-34658 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Simple Popup Newsletter WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER[... |
| CVE-2021-34657 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The 2TypoFR WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the text function found in the ~/vendor... |
| CVE-2021-34656 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scri... |
| CVE-2021-34655 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the ~/in... |
| CVE-2021-34654 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Custom Post Type Relations WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the cptr[name] param... |
| CVE-2021-34653 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The WP Fountain WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] ... |
| CVE-2021-34652 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The Media Usage WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/mmu_admin... |
| CVE-2021-34651 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Scribble Maps WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the map parameter in the ~/includ... |
| CVE-2021-34649 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Simple Behance Portfolio WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `dark` parameter i... |
| CVE-2021-34644 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Multiplayer Games WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_S... |
| CVE-2021-34643 | MEDIUM | 6.1 | 2.4% | Aug 16, 2021 | The Skaut bazar WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] ... |
| CVE-2021-34642 | MEDIUM | 6.1 | 0.9% | Aug 16, 2021 | The Smart Email Alerts WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the api_key in the ~/views/s... |
| CVE-2021-34641 | MEDIUM | 5.4 | 0.7% | Aug 16, 2021 | The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/sr... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now