Medium
CVE-2016-10871
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
c1690fe3-f03f-4640-9948-2109d73a841c
WP Support Plus Responsive Ticket System <= 7.1.4 - SQL Injection
Critical
7dc9dc1c-2d79-4dc3-9fee-be5d591d2400
Google Analytics Counter Tracker <= 3.4.1 - Unauthenticated PHP Object Injection
Critical
CVE-2016-15033
Delete All Comments <= 2.0 - Arbitrary File Upload
Critical
9d0c144b-609b-4b4a-bfb2-de38b5969a9e
BP Profile Search <= 4.5.3 - PHP Object Injection
High
CVE-2016-10944
Multisite Post Duplicator <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2016-10736
Grow Social <= 1.2.5 - Reflected Cross-Site Scripting
Medium
b024f6ce-c3ec-4ed9-a8ea-54f926e38443
WooCommerce Email Test <= 1.5 - Sensitive Data Exposure
High
CVE-2016-10926
Nelio AB Testing < 4.5.9 - Server Side Request Forgery
Medium
CVE-2016-10112
WooCommerce <= 2.6.8 - Authenticated Stored Cross-Site Scripting
High
c99e7f4c-ba91-4d64-b8d4-23940381e79a
Simple Personal Message < 2.0.0 - Authenticated SQL Injection
Critical
8911642f-6061-42a1-b733-8cc44b2870f1
Ultimate Member <= 1.3.75 - Missing Authorization to Password Reset
Critical
59a645e4-2a23-4440-a463-fa197dfa20b2
WA Form Builder <= 1.1 - SQL Injection
Medium
CVE-2016-20064
WP Vault <= 0.8.6.6 - Local File Inclusion
Medium
71aeca29-a9bd-42c0-8150-814b79e931fa
Insert Html Snippet <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2016-20065
Product Catalog 8 <= 1.2.0 - SQL Injection
Medium
d3b954e6-cf5d-4451-b770-777d116edd90
Image Gallery - Responsive Photo Gallery < 2.0.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2016-10945
Platform 4 <= 1.1.4 - Cross-Site Request Forgery
Critical
CVE-2015-1000013
Csv2WPeC Coupon <= 1.1 - Arbitrary File Upload
Critical
CVE-2016-10904
Olimometer < 2.57 - SQL Injection
High
CVE-2016-10946
Wp-D3 < 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2017-1000033
Vospari Forms < 1.4 - Reflected Cross-Site Scripting
High
9652575b-389c-42e3-800a-0f133e0c224b
Shortcodes by Angie Makes < 2.07 - Authenticated Stored Cross-Site Scripting
Medium
062f5bc7-9d53-4a28-b603-9901ce2175d8
Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.