High
CVE-2016-10948
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2016-20072
BBS e-Franchise < 1.1.4 - SQL Injection
High
CVE-2016-10947
Post Indexer <= 3.0.6.1 - Authenticated (Super Admin+) SQL Injection
High
CVE-2016-10949
Relevanssi Premium < 1.14.6.1 - SQL Injection
High
CVE-2016-6565
NextGen Gallery <= 2.1.56 - Remote File Inclusion
Critical
CVE-2016-10889
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion & SQL injection
High
e32a4038-0f67-48b3-80c9-94d279752c31
Lightbox < 1.6.8 - Stored Cross-Site Scripting
High
02699ada-f4bf-45c4-89e8-018dfff40ac1
Gallery - Video Gallery and YouTube Gallery <= 2.0.3 - Cross-Site Request Forgery
High
3c43939f-c0c7-4388-80ae-44bdf67675c7
WP eCommerce < 3.11.4 - SQL Injection
Medium
CVE-2016-10934
Check & Log Email <= 0.5.1 - Reflected Cross-Site Scripting
Critical
CVE-2016-20073
Answer My Question <= 1.3 - SQL Injection
Medium
CVE-2016-10866
All In One WP Security & Firewall <= 4.1.9 - Reflected Cross-Site Scripting
High
0448eb1c-1a4a-465e-aa30-e4af10d27560
Mini Cart <= 1.00.1 - Authenticated (Admin+) SQL Injection
Medium
a739b805-e631-461e-802f-196e4117d403
WP Google Maps <= 6.3.14 - Stored Cross-Site Scripting
High
CVE-2016-10950
Image Optimizer, Resizer and CDN – Sirv < 1.3.2 - SQL Injection
High
9373c82d-15a8-495a-8290-1b85c096f7e5
W3 Total Cache <= 0.9.4.1 - Weak validation of Amazon SNS push messages
High
CVE-2016-10951
FireStorm Shopping Cart eCommerce Plugin <= 2.07.02 - SQL Injection
High
ff22c969-e580-4290-ab08-7c02b6eac938
Calendar < 1.3.8 - Reflected Cross-Site Scripting
High
fe02377a-8d09-4d86-a049-3002516cf933
YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object Injection
Medium
fc3d84f3-bd9d-40e6-bc88-90c840a928c0
Caldera Forms <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
f28ca2dc-404d-4abf-9d44-1b1f8309e9ee
Post Grid <= 2.0.12 - Arbitrary File Deletion
Medium
CVE-2016-10952
Quotes Collection < 2.0.6 - Cross-Site Scripting
Medium
CVE-2016-10919
WassUp Real Time Analytics < 1.9.1 - Cross-Site Scripting
Medium
d4170426-b418-48ec-8233-1ca1aca60473
DW Question & Answer < 1.4.2.3 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.