Medium
b269a5c9-9f0e-4dba-a06e-2d8dd94643b4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
64a7a4db-8b28-4085-91b0-4ea5343c5643
Import WooCommerce < 1.1 - Reflected Cross-Site Scripting
Medium
cf02db2c-5fd2-4f21-a95c-e7645e22ecc6
WP Advanced Importer <= 2.1.1 - Reflected Cross-Site Scripting
Medium
92a9ca70-2867-433a-932e-191ed7f01945
CSV Import <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-10867
All In One WP Security & Firewall <= 4.0.5 - Cross-Site Scripting
Medium
CVE-2016-10868
All In One WP Security & Firewall <= 4.0.4 - Cross-Site Scripting
High
CVE-2016-11003
Bloom Email Opt-In < 1.1.1 - Sensitive Information Disclosure
High
CVE-2016-11002
ElegantThemes <= 1.2.3 - Privilege Escalation
High
CVE-2016-11004
Elegant Themes Monarch < 1.2.7 - Privilege Escalation
Critical
faed1198-b8c4-46b1-b6a6-5fc35cd7bdf8
Formidable Form Builder <= 2.0.21 - Missing Authorization Checks
Medium
a68f024d-b80d-4e6c-8420-5e0dde87d8f0
ALO EasyMail Newsletter <= 2.6.01 - Cross-Site Request Forgery
High
7ee267ff-b650-44a5-994b-3a22d34722e8
WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 - Arbitrary File Upload
Critical
761ec035-5961-45a5-8197-b5209df8bc3a
Jigoshop – Store Toolkit <= 1.3.8 - Missing Authorization Checks
Critical
668ba3a9-d53c-45ab-854f-1a9e83dd54b8
WP e-Commerce – Store Exporter <= 1.6.6 - Missing Authorization
Critical
588ece40-a848-4b2c-9db5-e63e0d11dda0
WP e-Commerce – Store Toolkit <= 2.0.1 - Missing Authorization
High
CVE-2016-0796
mb.miniAudioPlayer <= 1.7.6 - Multiple Vulnerabilities
High
CVE-2016-10923
Store Toolkit for WooCommerce <= 1.5.7 - Privilege Escalation
High
CVE-2016-11001
User Submitted Posts < 20160215 - Reflected Cross-Site Scripting
Critical
CVE-2016-10935
WooCommerce – Store Exporter <= 1.8.3 - Missing Authorization
Medium
CVE-2016-1000152
Easy Contact Form Builder < 1.1 - Cross-Site Scripting
Medium
CVE-2016-1000147
Recipes Writer <= 1.0.4 - Cross-Site Scripting
Medium
CVE-2016-1000150
Simplified Content < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000128
Anti Plagiarism <= 3.60 - Reflected Cross-Site Scripting
Medium
aac6fcee-cb8b-4862-a1f1-9af692ae741f
Bulk change of posts terms and post types <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.