High
CVE-2016-10966
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
75f964a8-a5eb-4990-a6d4-e911a20d0035
Real3D Flipbook <= 2.8 - Reflected Cross-Site Scripting via bookId parameter
Critical
CVE-2016-10965
Real3D Flipbook <= 1.0.0 - Directory Traversal
Medium
dc24d2de-352c-4215-a4db-2966aa6467c7
Real3D Flipbook <= 2.8 - Directory Traversal via Uploads
High
9cfbafce-ba3b-477f-ad8d-ca4e57332f0b
WangGuard < 1.7.2 - Reflected Cross-Site Scripting
Critical
82802e80-efb5-4aa3-9fea-9c21bfb71efa
Real3D Flipbook <= 2.8 - Unauthenticated Arbitrary File or Directory Delete
Medium
f80fcadd-d6b7-4d35-bced-ada3514e60fa
Store Locator Plus <= 4.5.11 - Cross-Site Scripting
Medium
CVE-2016-10961
ColorWay <= 3.4.1 - Cross-Site Scripting
High
8a613e56-54c0-4bf5-b87f-0e4e507c1337
FormBuilder < 1.08 - SQL Injection
Medium
8910d60c-45be-41a1-86fb-a0d60a78e660
WordPress Landing Pages <= 2.2.4 - Cross-Site Scripting
High
4f018e22-bf07-4371-afc1-3e664ea1c5a3
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting
Medium
86167b8c-6d4e-495d-96f7-8cda8e2c80b8
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion
Medium
CVE-2016-10970
SupportFlow <= 0.6 - Cross-Site Scripting via a ticket excerpt.
Critical
CVE-2016-10971
MemberSonic Lite Membership Site Plugin <= 1.2 - Authentication Bypass
High
6173d307-9917-4d76-b6bf-d5646b9e33d6
WP Activity Log 1.5 - 2.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2016-4826
Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting
High
CVE-2016-4825
Welcart e-Commerce < 1.8.3 - Object Injection
Critical
CVE-2016-4828
Welcart e-Commerce <= 1.8.2 - Authentication Bypass
Medium
CVE-2016-4827
Welcart e-Commerce <= 1.8.2 - Cross-Site Scripting
Critical
8ada8a27-752c-4726-b330-895b967ea290
WordPress File Upload < 3.9.0 - Arbitrary File Upload
Medium
76d96ab1-e667-4242-aee3-95f8dfb07ccd
WordPress File Monitor <= 2.3.3 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2016-1000112
Contus Video Comments <= 1.0 - Remote File Upload
High
8530affb-0b6e-4b71-acab-3561cccc1855
Advanced Access Manager <= 3.2.1 - Unrestricted AJAX Actions allowing Privilege Escalation
High
CVE-2016-10968
Community by PeepSo – Social Network, Membership, Registration, User Profiles < 1.6.1 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.