Critical
CVE-2016-10935
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2016-1000152
Easy Contact Form Builder < 1.1 - Cross-Site Scripting
Medium
CVE-2016-1000147
Recipes Writer <= 1.0.4 - Cross-Site Scripting
Medium
CVE-2016-1000150
Simplified Content < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000128
Anti Plagiarism <= 3.60 - Reflected Cross-Site Scripting
Medium
aac6fcee-cb8b-4862-a1f1-9af692ae741f
Bulk change of posts terms and post types <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000126
Admin Font Editor <= 1.7 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000136
Heat Trackr < 1.01 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000146
Pondol Form to Mail <= 1.1 - Reflected Cross-Site Scripting
High
5cdbd5fd-bb12-4202-b6c7-f314ad8987f5
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress <= 9.3 - Missing Authorization
Medium
3f753961-3eeb-402d-876f-4a4dea41a96a
Duplicator < 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2016-1000130
E-Search <= 1.0 - Reflected Cross-Site Scripting via title_az parameter
Medium
CVE-2016-1000140
New Year Firework <= 1.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000127
AJAX Random Post <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000144
Photoxhibit <= 2.1.8 - Reflected Cross-Site Scripting
High
CVE-2016-20068
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Critical
CVE-2016-10909
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Medium
CVE-2016-10908
Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting
Medium
cd88b116-0a6e-412b-8d43-024fdf36bcdf
Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 - Authorization Bypass
Critical
8a2186c9-fa27-4d7d-be41-c82711c49334
WP User Frontend < 2.3.11 - Arbitrary File Upload
Medium
3f0b212a-969b-4cd3-a31c-40b9ff9dce5f
Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton
High
CVE-2016-10922
Store Toolkit for WooCommerce <= 1.5.6 - Missing Authorization
Medium
CVE-2016-11005
Elfsight Instagram Widget – Instagram Gallery < 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10912
Universal Analytics <= 1.3.0 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.