Medium
CVE-2016-10705
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
4fbeee29-751a-48c9-a875-393441f62dde
Lingotek Translation <= 1.1.8 - Cross-Site Scripting
High
CVE-2016-10969
SupportFlow <= 0.6 - Stored Cross-Site Scripting via discussion ticket title
Medium
CVE-2016-5833
WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name #2
Medium
CVE-2016-5838
WordPress Core < 4.5.3 - Password Change via Stolen Cookie
Medium
CVE-2016-5837
WordPress Core < 4.5.3 - Authorization Bypass to Remove Category Attribute
Medium
CVE-2016-5834
WordPress Core < 4.5.3 - Cross-Site Scripting via Attachment Name
High
CVE-2016-5839
WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection
Medium
CVE-2016-5836
WordPress Core < 4.5.3 - Denial of Service via oEmbed Protocol
Medium
CVE-2016-5832
WordPress Core < 4.5.3 - Cross-Site Scripting via Customizer
Medium
CVE-2016-5835
WordPress Core < 4.5.3 - Revision History Disclosure
Medium
2cff84a4-9264-4789-997b-bc11a8bac449
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update
Medium
69bdd5e6-1334-42bc-a13f-215eb61733e7
Contus Video Comments <= 1.0 - Authorization Bypass
Medium
48d0e0e0-81db-46ef-ba64-daa2a4079b79
Yoast SEO <= 3.2.5 - Cross-Site Scripting
High
ddfbde0f-8e41-45c9-b808-bee82c2ff172
WP Remote Upload <= 1.2.1 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
d4804081-67b1-4c62-af8e-bdbcea2ba6e7
WP Support Plus Responsive Ticket System <= 7.1.4 - Authentication Bypass
Critical
CVE-2016-10917
Search Everything <= 8.1.5 - SQL Injection
High
d96c9b04-6850-40ab-8006-81cca8a9dffe
CM Ad Changer <= 1.7.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
010300f9-adef-4958-ac77-6ff981833e9e
Blaze Slide Show <= 2.7 - Arbitrary File upload
High
d8b544ba-8530-4c00-a8a8-b24d8b68a33a
Double Opt-In for Download <= 2.0.9 - SQL Injection
Critical
CVE-2016-10972
Newspaper - News & WooCommerce WordPress Theme <= 6.7 - Arbitrary Options Update
Critical
c5a5c209-0ccd-4fa9-b22d-05bb22247441
OneLogin SAML-SSO Plugin < 2.1.6 - Authentication Bypass
Medium
81b9cebd-eff6-4650-977e-ee81089e683a
Levo Slideshow <= 2.3 - Cross-Site Scripting
Medium
CVE-2017-18634
Newspaper - News & WooCommerce WordPress Theme < 6.7.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.