Critical
CVE-2016-10916
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2016-10928
OneLogin SAML SSO < 2.2.0 - Authentication Bypass
Critical
f5ad74c5-93ba-414c-98ad-0987547f172f
Simple Download Monitor <= 3.2.8 - Missing Authorization
Critical
d7d381af-bb2a-43cb-9e5d-0b3d0e5f88f0
Download Manager <= 2.8.7 - Missing Authorization
Medium
c59cddfb-c434-4a69-9c1c-7d58f022c1aa
Download Manager <= 2.8.7 - Privilege Escalation
Medium
639bf20c-04d4-49e5-8da1-685421a6f63a
Download Manager <= 2.8.7 - Sensitive Information Disclosure via Directory Listing
Medium
CVE-2016-1564
WordPress Core < 4.4.1 - Cross-Site Scripting via Theme Names
Medium
CVE-2016-10996
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
Medium
c55e1d38-081c-4ef6-aad7-04ef52c6bee0
Commentator < 2.5.3 - Reflected Cross-Site Scripting
High
c7296fdb-d5d6-4d4f-ac80-b9d5452191b4
WP Symposium Pro < 16.01 - Cross-Site Request Forgery
High
52c7edcc-d8dd-401a-9d36-e395fa7189bf
WP Symposium Pro < 16.01 - Cross-Site Scripting
Critical
806e5056-5c29-49d0-9150-add6ee485758
Simple Ads Manager <= 2.9.4.116 - SQL Injection
High
CVE-2015-9228
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
Medium
CVE-2015-9387
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2015-9386
mTouch Quiz <= 3.1.2 - Reflected Cross-Site Scripting
High
CVE-2015-9388
mTouch Quiz <= 3.1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2015-9389
mTouch Quiz <= 3.1.2 - Stored Cross-Site Scripting
High
CVE-2015-7791
Welcart e-Commerce < 1.5.3 - SQL Injection
Medium
CVE-2015-9390
Admin Management Xtended <= 2.4.0 - Missing Authorization Checks
Critical
CVE-2015-9344
Link Log – external link click monitor < 2.1 - SQL Injection
Medium
CVE-2015-9391
YAWPP (Yet Another WordPress Petition Plugin) <= 1.2.2 - Cross-Site Scripting
High
7bd89bd9-4f99-4828-bacc-15d2cfe13066
Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting
Medium
CVE-2015-20019
Content text slider on post < 6.9 - Cross-Site Scripting
Medium
CVE-2015-9393
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin < 1.5.63 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.