2021 CVE Vulnerabilities
23,494 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35392 | HIGH | 7.5 | 83.2% | Aug 16, 2021 | Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP... |
| CVE-2021-24548 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The Mimetic Books WordPress plugin through 0.2.13 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) in t... |
| CVE-2021-24541 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The Wonder PDF Embed WordPress plugin before 1.7 does not escape parameters of its wonderplugin_pdf shortcode, which cou... |
| CVE-2021-24540 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The Wonder Video Embed WordPress plugin before 1.8 does not escape parameters of its wonderplugin_video shortcode, which... |
| CVE-2021-24538 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The Current Book WordPress plugin through 1.0.1 does not sanitize user input when an authenticated user adds Author or B... |
| CVE-2021-24536 | MEDIUM | 6.1 | 0.4% | Aug 16, 2021 | The Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and... |
| CVE-2021-24535 | MEDIUM | 6.1 | 0.4% | Aug 16, 2021 | The Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising... |
| CVE-2021-24534 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before out... |
| CVE-2021-24527 | CRITICAL | 9.8 | 7.7% | Aug 16, 2021 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to rese... |
| CVE-2021-24526 | MEDIUM | 5.4 | 1.1% | Aug 16, 2021 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not esca... |
| CVE-2021-24519 | MEDIUM | 4.8 | 0.6% | Aug 16, 2021 | The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' fie... |
| CVE-2021-24518 | MEDIUM | 4.8 | 0.7% | Aug 16, 2021 | The WPFront Notification Bar WordPress plugin before 2.0.0.07176 does not sanitise or escape its Custom CSS setting, all... |
| CVE-2021-24512 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) ... |
| CVE-2021-24471 | MEDIUM | 5.4 | 0.6% | Aug 16, 2021 | The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, ... |
| CVE-2021-24466 | MEDIUM | 6.1 | 0.4% | Aug 16, 2021 | The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logg... |
| CVE-2021-24445 | MEDIUM | 5.5 | 0.7% | Aug 16, 2021 | The My Site Audit WordPress plugin through 1.2.4 does not sanitise or escape the Audit Name field when creating an audit... |
| CVE-2021-24411 | MEDIUM | 6.1 | 0.4% | Aug 16, 2021 | The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not san... |
| CVE-2021-24410 | MEDIUM | 6.1 | 0.4% | Aug 16, 2021 | The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, an... |
| CVE-2021-24380 | MEDIUM | 4.3 | 0.4% | Aug 16, 2021 | The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing ... |
| CVE-2021-24363 | MEDIUM | 4.9 | 1.9% | Aug 16, 2021 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded f... |
| CVE-2021-24362 | MEDIUM | 6.1 | 0.8% | Aug 16, 2021 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded S... |
| CVE-2021-35936 | MEDIUM | 5.3 | 4.0% | Aug 16, 2021 | If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor... |
| CVE-2021-33193 | HIGH | 7.5 | 46.2% | Aug 16, 2021 | A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request spl... |
| CVE-2021-23423 | HIGH | 7.5 | 1.1% | Aug 16, 2021 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include... |
| CVE-2021-23422 | HIGH | 7.8 | 0.8% | Aug 16, 2021 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Comma... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now