Critical
CVE-2016-4828
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2016-5835
WordPress Core < 4.5.3 - Revision History Disclosure
Medium
48d0e0e0-81db-46ef-ba64-daa2a4079b79
Yoast SEO <= 3.2.5 - Cross-Site Scripting
Critical
d4804081-67b1-4c62-af8e-bdbcea2ba6e7
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
Critical
CVE-2016-20010
EWWW Image Optimizer <= 2.8.4 - Remote Code Execution
Critical
c5a5c209-0ccd-4fa9-b22d-05bb22247441
OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass
High
a859505e-87ba-49f0-910b-de6141976f86
CMS Commander – Manage Multiple Sites Plugin <= 2.21 - PHP Object Injection
High
ecd68933-e808-4816-b9d2-7491194f2347
Stream <= 3.0.5 - Sensitive Data Exposure
High
3ebe25a7-fa4d-4e3f-b969-2ff3a8388b06
WP Fastest Cache <= 0.8.5.7 - Local File Inclusion
Critical
af90aef0-fd96-43ff-8400-09bd5cebed28
WP-EMail < 2.67.2 - SQL Injection
Medium
CVE-2016-10977
Nelio AB Testing < 4.5.0 - Directory Traversal
Critical
2c5bb593-59b5-4760-8d54-14d7665c7e7f
Event Registration <= 6.02.02 - PHP Object Injection
Medium
a7701dd2-8452-4529-a931-db2553ca1ae5
Yoast SEO <= 3.2.4 - Sensitive Data Exposure
High
CVE-2016-1209
Ninja Forms Contact Form 2.9.36 - 2.9.42 - PHP Object Injection
High
CVE-2016-15041
MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting
Medium
f3bbc23b-94af-4f4f-8b5f-6af41108fd93
Google Authenticator <= 0.47 - Improper Authentication
High
CVE-2016-10983
Ghost <= 0.5.5 - Missing Authorization Checks
Critical
CVE-2016-10888
All In One WP Security & Firewall <= 4.0.6 - SQL Injection
High
CVE-2016-10991
IMDB Profile Widget < 1.0.9 - Local File Inclusion
Critical
CVE-2016-20082
A/B Test for WordPress <= 1.0.7 - Local File Inclusion
High
eab98c41-f0f2-4953-b9b3-c08e1e92c03a
BulletProof Security <= .53.2 - Cross-Site Scripting
High
CVE-2016-10997
Beauty & Clean <= 1.0.8 - Cross-Site Request Forgery & Arbitrary File Upload
Critical
f1b6fe67-cbd8-438f-8e06-d0f25eddc81a
Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor
Medium
9b86a259-b102-411a-8d4c-c131737b90d8
Jetpack – WP Security, Backup, Speed, & Growth <= 3.9.1 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.