Medium
CVE-2016-10867
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2016-10868
All In One WP Security & Firewall <= 4.0.4 - Cross-Site Scripting
High
CVE-2016-11003
Bloom Email Opt-In < 1.1.1 - Sensitive Information Disclosure
High
CVE-2016-11004
Elegant Themes Monarch < 1.2.7 - Privilege Escalation
Medium
a68f024d-b80d-4e6c-8420-5e0dde87d8f0
ALO EasyMail Newsletter <= 2.6.01 - Cross-Site Request Forgery
Critical
761ec035-5961-45a5-8197-b5209df8bc3a
Jigoshop – Store Toolkit <= 1.3.8 - Missing Authorization Checks
Critical
668ba3a9-d53c-45ab-854f-1a9e83dd54b8
WP e-Commerce – Store Exporter <= 1.6.6 - Missing Authorization
High
CVE-2016-0796
mb.miniAudioPlayer <= 1.7.6 - Multiple Vulnerabilities
Critical
CVE-2016-10935
WooCommerce – Store Exporter <= 1.8.3 - Missing Authorization
Medium
CVE-2016-1000146
Pondol Form to Mail <= 1.1 - Reflected Cross-Site Scripting
Medium
cd88b116-0a6e-412b-8d43-024fdf36bcdf
Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 - Authorization Bypass
High
CVE-2016-10922
Store Toolkit for WooCommerce <= 1.5.6 - Missing Authorization
Medium
14667d93-4fba-4c50-8228-737ae91f2789
MailPoet Newsletters <= 2.6.19 - Reflected Cross-Site Scripting
Medium
6d93ce6c-0139-472c-a5ec-21fdf33cd898
Titan Anti-spam & Security <= 4.1 - Cross-Site Scripting
Critical
f5ad74c5-93ba-414c-98ad-0987547f172f
Simple Download Monitor <= 3.2.8 - Missing Authorization
Medium
CVE-2016-10996
Popup Builder by OptinMonster <= 1.1.4.5 - Remote Code Execution
High
CVE-2015-9228
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
High
7bd89bd9-4f99-4828-bacc-15d2cfe13066
Ninja Forms Contact Form <= 2.9.28 - Stored Cross-Site Scripting
High
CVE-2015-9395
Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
High
74f8af2b-69fb-41db-b978-62709322aed3
Email Newsletter <= 20.13.6 - Reflected Cross-Site Scripting
Medium
0cfdb6de-41f8-4bea-a017-5708fceee762
Social Share Button <= 2.1 - Stored Cross-Site Scripting
High
CVE-2015-5308
wp-championship < 5.9 - SQL Injection
Medium
CVE-2015-7682
Pie Register – User Registration Forms < 2.0.19 - Authenticated SQL Injection
Medium
CVE-2015-7377
Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.