Medium
3b8282a2-8265-4fa0-b137-6272b9e44fc3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
62e01d59-e649-4b84-993b-9faf28a24274
Simple History Plugin < 2.7.5 - Sensitive Information Disclosure
Medium
CVE-2016-10878
WP Google Map Plugin <= 3.1.1 - Cross-Site Scripting
Medium
42d56d6a-365a-4fa2-977f-a1328e0ec1b3
Clicky by Yoast <= 1.5 - Stored Cross-Site Scripting
Medium
e10a95e3-e834-4f84-85c1-4a1ffad41b5b
WooCommerce <= 2.6.3 - Stored Cross-Site Scripting via REST-API
Medium
cae1e984-95b2-4b76-b6b3-563dc3104a72
Woo Custom Checkout Field < 1.3.5 - Cross-Site Scripting
Medium
CVE-2016-10899
Total Security <= 3.4.0 - Unauthenticated Settings Change
Medium
CVE-2016-10898
Total Security <= 3.4 - Cross-Site Scripting
High
2ae70225-3597-463b-907c-d2a3a7bcecb4
WooCommerce Stock Manager < 1.0.9 - Authorization Bypass
Medium
fd0c3965-6b35-46a8-8cf0-6726cdb03c8f
Code Snippets < 2.7.0 - Reflected Cross-Site Scripting
High
c77295f3-0a37-4fa8-a375-b4bd3dc55945
Contact Form Email < 1.1.48 - Reflected Cross-Site Scripting
Medium
CVE-2017-5942
WP Mail <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-4833
Nofollow Links <= 1.0.10 - Cross-Site Scripting
High
06187bf0-7e3b-49c0-9f34-3d717e8d8ece
Lazy Load < 0.6.1 - Authenticated Stored Cross-Site Scripting
Medium
e01532bb-3011-4efe-b072-d0df5708f8e9
Ninja Forms Contact Form <= 2.9.51 - Multiple Reflected Cross-Site Scripting
Medium
CVE-2016-10963
Icegram <= 1.9.18 - Cross-Site Scripting
Critical
c63048ad-3d37-402e-8e61-415d2d6caa69
Form Lightbox <= 2.1 - Unauthenticated Arbitrary Options Update
High
CVE-2016-10962
Icegram <= 1.9.18 - Cross-Site Request Forgery
Medium
1e5e16c9-53d2-4fdd-8370-920b22f52033
WooCommerce <= 2.6.2 - Stored Cross-Site Scripting
High
0caf1660-b85e-46e1-9270-a8e14c6bbf52
SpiderVPlayer < 1.5.18 - Multiple Blind Authenticated SQL Injections
Medium
CVE-2016-10964
dwnldr < 1.01 - Cross-Site Scripting
Medium
66a2a159-5748-49bd-9204-e85e1c6729df
Woo Email Control < 1.02 - Reflected Cross-Site Scripting
Medium
ae8a316f-a9ad-451a-9892-cf5068072a78
Master Slider <= 2.7.1 - Cross-Site Scripting
Critical
CVE-2016-15042
Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.