Medium
0a49c8df-0524-41af-b095-b5953e6f68d8
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Unrated
344
Huge IT Slider - SQL Injection
High
eb367998-5c5c-4c4d-81cb-519023f028e6
W3 Total Cache <= 0.9.4.1 - Arbitrary Code Execution via settings import
Medium
ddd2c5d9-6489-4154-a494-20392f435bc6
W3 Total Cache <= 0.9.4.1 - Authenticated Arbitrary File Download
High
c187ed25-6ba7-4a58-97df-5fea723d485a
W3 Total Cache <= 0.9.4.1 - Arbitrary File Upload
Low
a07bc541-2113-43db-acdf-9ecb00dd50e9
W3 Total Cache <= 0.9.4.1 - Security Token Bypass via Type Juggling
Unrated
340
Huge IT Googlemaps - SQL Injection
Unrated
339
Huge IT Video Gallery - XSS (Cross Site Scripting)
Medium
CVE-2016-10880
Google Doc Embedder <= 2.6 - Cross-Site Scripting
High
CVE-2016-10930
Support Plus Responsive Ticket System < 7.1.0 - Insecure Direct Object Reference
Critical
CVE-2016-10954
Neosense - Multipurpose WordPress Theme | WordPress < 1.8 - Arbitrary File Upload
Critical
2b0198c8-4be8-44e0-9728-d5d2aa376796
PPOM for WooCommerce <= 1.1 - Arbitrary File Upload
A vulnerability in the PPOM for WooCommerce plugin allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution.
High
CVE-2016-10884
Simple Membership <= 3.3.2 - Multiple Cross-Site Request Forgery
High
CVE-2016-10941
Podlove Podcast Publisher < 2.3.16 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2019-15111
WP Front End Profile <= 0.2.1 - Privilege Escalation
Medium
CVE-2019-15110
WP Front End Profile <= 0.2.1 - Stored Cross-Site Scripting
Medium
ca729178-8df0-437e-82cc-70c4975f7b47
MailPoet Newsletters <= 2.7.2 - SQL Injection
Medium
aff636ac-5bb5-4804-adf4-358ef3158d2d
MailPoet Newsletters <= 2.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-1241
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Medium
CVE-2016-1242
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files
Medium
c89d56e2-68aa-4caf-bc1b-9aa32ec11ba3
Gravity Forms <= 2.0.6.5 - Cross-Site Scripting
High
CVE-2016-10915
Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery
Medium
CVE-2016-7168
WordPress Core < 4.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2016-7169
WordPress Core < 4.6.1 - Authenticated Directory Traversal to Arbitrary File Access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.