Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

unknown — Vulnerabilities & Security Advisories 4138

Browse all 4138 CVE security advisories affecting unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by unknown:Contest GalleryDownload ManagerTutor LMS – eLearning and online course solutionEventONModern Events Calendar Litewp-eMemberAI ChatBotElementor Website BuilderNinja Forms Contact Form – The Drag and Drop Form Builder for WordPressWelcart e-CommerceLogo SliderForm Maker by 10WebBooster for WooCommerceYi Technologywp-cart-for-digital-productswp-affiliate-platformPhoto Gallery by 10WebMapPress Maps for WordPressEventPrimePopup boxWPQA BuilderWP MultiTaskingPhoto Gallery by 10Web – Mobile-Friendly Image GallerySalon booking systemSimple Download MonitorAutoptimizeVikBooking Hotel Booking Engine & PMSLearnPressNewsletter PopupNinja Forms
CVE IDTitleCVSSSeverityPublished
CVE-2021-24343 iFlyChat – WordPress Chat < 4.7.0 - Admin+ Stored Cross-Site Scripting (XSS) — iFlyChat – WordPress ChatCWE-79 5.4 -2021-06-07
CVE-2021-24344 Easy Preloader <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS) — Easy PreloaderCWE-79 4.8 -2021-06-07
CVE-2021-24336 FlightLog <= 3.0.2 - Authenticated (editor+) SQL Injection — FlightLogCWE-89 7.2 -2021-06-07
CVE-2021-24328 WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS) — WP Login Security and HistoryCWE-352 6.5 -2021-06-01
CVE-2021-24329 WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS) — WP Super CacheCWE-79 5.4 -2021-06-01
CVE-2021-24330 Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID — Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPressCWE-79 4.8 -2021-06-01
CVE-2021-24331 Smooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSS — Smooth Scroll Page Up/Down ButtonsCWE-79 4.8 -2021-06-01
CVE-2021-24333 Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS) — Content Copy Protection & Prevent Image SaveCWE-352 7.1 -2021-06-01
CVE-2021-24334 Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFS — Instant Images – One Click Unsplash UploadsCWE-79 6.1 -2021-06-01
CVE-2021-24335 Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS — Car Repair Services & Auto MechanicCWE-79 6.1 -2021-06-01
CVE-2021-24313 WP Prayer < 1.6.2 - Authenticated Stored Cross-Site Scripting (XSS) — WP PrayerCWE-79 5.4 -2021-06-01
CVE-2021-24309 Weekly Schedule < 3.4.3 - Authenticated Stored XSS — Weekly ScheduleCWE-79 5.4 -2021-06-01
CVE-2021-24311 External Media < 1.0.34 - Authenticated Arbitrary File Upload — External MediaCWE-434 8.1 -2021-06-01
CVE-2021-24332 Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS) — AutoptimizeCWE-79 4.8 -2021-05-24
CVE-2021-24297 Goto < 2.1 - Reflected Cross-Site Scripting (XSS) — GotoCWE-79 6.1 -2021-05-24
CVE-2021-24325 404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS) — 404 SEO RedirectionCWE-79 6.1 -2021-05-17
CVE-2021-24326 All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS) — All 404 Redirect to HomepageCWE-79 5.4 -2021-05-17
CVE-2021-24327 SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS) — SEO Redirection Plugin – 301 Redirect ManagerCWE-79 4.8 -2021-05-17
CVE-2021-24324 404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS) — 404 SEO RedirectionCWE-352 6.5 -2021-05-17
CVE-2021-24285 Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL Injection — Car Seller - Auto Classifieds ScriptCWE-89 9.8 -2021-05-14
CVE-2021-24254 College Publisher Import <= 0.1 - Arbitrary File Upload to RCE — College publisher ImportCWE-434 7.2 -2021-05-05
CVE-2021-24252 Event Banner <= 1.3 - Arbitrary File Upload to RCE — Event BannerCWE-434 9.8 -2021-05-05
CVE-2021-24253 Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE — ClassyfriedsCWE-434 8.8 -2021-05-05
CVE-2021-24293 NextGEN Gallery Pro < 3.1.11 - Reflected Cross-Site Scripting (XSS) — NextGen Gallery ProCWE-79 6.1 -2021-05-05
CVE-2021-24265 Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS — Rife Elementor Extensions & TemplatesCWE-79 5.4 -2021-05-05
CVE-2021-24266 The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS — The Plus Addons for Elementor Page Builder LiteCWE-79 5.4 -2021-05-05
CVE-2021-24267 All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS — All-in-One Addons for Elementor – WidgetKitCWE-79 5.4 -2021-05-05
CVE-2021-24268 JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS — JetWidgets For ElementorCWE-79 5.4 -2021-05-05
CVE-2021-24269 Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS — Sina Extension for ElementorCWE-79 5.4 -2021-05-05
CVE-2021-24270 DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS — DethemeKit For ElementorCWE-79 5.4 -2021-05-05

This page lists every published CVE security advisory associated with unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.