High
CVE-2016-11011
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2016-11009
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
Medium
CVE-2016-11010
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
Medium
CVE-2016-11007
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Insecure Direct Object Reference
Medium
CVE-2016-11006
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Unauthorized Settings Change
Medium
CVE-2016-0765
eShop <= 6.3.14 - Multiple Cross-Site Scripting
Medium
CVE-2016-2221
WordPress Core < 4.4.2 - Open Redirect via wp_validate_redirect
High
CVE-2016-10883
Simple add pages or posts < 1.7 - Cross-Site Request Forgery
High
CVE-2016-0769
eShop <= 6.3.14 - Multiple SQL Injections
High
616c65e7-8d0c-4be8-bd6f-f98187ff1539
User Meta Manager Plugin < 3.4.7 - Privilege Escalation
High
47b75e7f-87d3-40d5-b3c4-998d3164d48a
SP Project & Document Manager <= 2.5.9.5 - Cross-Site Request Forgery
Medium
14667d93-4fba-4c50-8228-737ae91f2789
MailPoet Newsletters <= 2.6.19 - Reflected Cross-Site Scripting
Medium
CVE-2016-2222
WordPress Core < 4.4.2 - Server-Side Request Forgery
Medium
e0365efc-f443-40a6-a365-fd36c1818242
User Meta Manager < 3.4.8 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2016-0770
Connections Business Directory < 8.5.9 - Cross-Site Scripting
Unrated
365
EasySocial versions before
Medium
6d93ce6c-0139-472c-a5ec-21fdf33cd898
Titan Anti-spam & Security <= 4.1 - Cross-Site Scripting
Medium
CVE-2016-11012
Sola Support Tickets < 3.13 - Cross-Site Scripting
Medium
7b19b0b2-d6cb-4d92-9925-c77d517ddfb7
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
Critical
4d79df74-bb28-412b-bba1-9f8a40ae981d
Appointment Booking Calendar <= 1.2.24 - SQL Injection
Medium
CVE-2016-11013
IMPress Listings <= 2.0.1 - Reflected Cross-Site Scripting
High
CVE-2014-9309
Formidable Form Builder <= 1.07.11 - SQL Injection
Medium
436d77d9-242a-452b-93d4-707881f59034
WP Easy Gallery <= 4.1.4 - Stored Cross-Site Scripting
High
13c9a71f-ec0a-4d4a-be08-787aa22a0fae
Appointment Booking Calendar <= 1.2.24 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.