Critical
CVE-2016-10045
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
High
57837060-433f-471c-9413-6d9b95b69f2a
Image Slider < 1.1.90 - Arbitrary File Deletion
High
CVE-2016-5851
Improper Restriction of XML External Entity Reference in python-docx
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Medium
76a4dbcd-b3f3-48e9-8175-c701837ac2ae
Chained Quiz <= 0.9.8 - Cross-Site Scripting
Medium
CVE-2016-10938
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2016-10114
aWeb Cart Watching System
Unrated
392
DT Register - 3.1.12 / 2.8.18 and previous
High
CVE-2016-9964
bottle.py vulnerable to CRLF Injection
High
CVE-2016-10940
ZM Gallery <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10939
Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10943
ZX_CSV Upload <= 1 - Authenticated (Admin+) SQL Injection
Medium
4aae4571-671a-46d7-b490-6cd0feced0af
WP Private Messages <= 1.0.1 - Authenticated SQL Injection
High
CVE-2016-11085
Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2016-10942
Podlove Podcast Publisher < 2.3.16 - SQL Injection
Medium
CVE-2016-10871
MailChimp for WordPress <= 4.0.10 - Reflected Cross-Site Scripting
High
c1690fe3-f03f-4640-9948-2109d73a841c
WP Support Plus Responsive Ticket System <= 7.1.4 - SQL Injection
Critical
7dc9dc1c-2d79-4dc3-9fee-be5d591d2400
Google Analytics Counter Tracker <= 3.4.1 - Unauthenticated PHP Object Injection
Critical
CVE-2016-15033
Delete All Comments <= 2.0 - Arbitrary File Upload
Critical
9d0c144b-609b-4b4a-bfb2-de38b5969a9e
BP Profile Search <= 4.5.3 - PHP Object Injection
High
CVE-2016-10944
Multisite Post Duplicator <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2016-10736
Grow Social <= 1.2.5 - Reflected Cross-Site Scripting
Medium
b024f6ce-c3ec-4ed9-a8ea-54f926e38443
WooCommerce Email Test <= 1.5 - Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.