High
CVE-2016-10926
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2016-10112
WooCommerce <= 2.6.8 - Authenticated Stored Cross-Site Scripting
Unrated
346
AVChat Video Chat Integration Kit - File permissions
High
c99e7f4c-ba91-4d64-b8d4-23940381e79a
Simple Personal Message < 2.0.0 - Authenticated SQL Injection
Critical
8911642f-6061-42a1-b733-8cc44b2870f1
Ultimate Member <= 1.3.75 - Missing Authorization to Password Reset
Unrated
390
JS Jobs - SQL Injection
Critical
59a645e4-2a23-4440-a463-fa197dfa20b2
WA Form Builder <= 1.1 - SQL Injection
Medium
CVE-2017-2243
Responsive Lightbox & Gallery <= 1.7.1 - Cross-Site Scripting
Medium
CVE-2016-20064
WP Vault <= 0.8.6.6 - Local File Inclusion
Medium
71aeca29-a9bd-42c0-8150-814b79e931fa
Insert Html Snippet <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2016-20065
Product Catalog 8 <= 1.2.0 - SQL Injection
Unrated
389
Kunena - XSS (Cross Site Scripting)
Medium
d3b954e6-cf5d-4451-b770-777d116edd90
Image Gallery - Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2016-10945
Platform 4 <= 1.1.4 - Cross-Site Request Forgery
Critical
CVE-2015-1000013
Csv2WPeC Coupon <= 1.1 - Arbitrary File Upload
Critical
CVE-2016-10904
Olimometer < 2.57 - SQL Injection
High
CVE-2016-10946
Wp-D3 < 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2017-1000033
Vospari Forms < 1.4 - Reflected Cross-Site Scripting
High
9652575b-389c-42e3-800a-0f133e0c224b
Shortcodes by Angie Makes < 2.07 - Authenticated Stored Cross-Site Scripting
Medium
062f5bc7-9d53-4a28-b603-9901ce2175d8
Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2016-10948
Post Indexer <= 3.0.6.1 - PHP Object Injection
Critical
CVE-2016-20072
BBS e-Franchise < 1.1.4 - SQL Injection
High
CVE-2016-10947
Post Indexer <= 3.0.6.1 - Authenticated (Super Admin+) SQL Injection
High
CVE-2016-10949
Relevanssi Premium < 1.14.6.1 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.