Medium
CVE-2016-10867
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2016-10868
All In One WP Security & Firewall <= 4.0.4 - Cross-Site Scripting
High
CVE-2016-11003
Bloom Email Opt-In < 1.1.1 - Sensitive Information Disclosure
High
CVE-2016-11002
ElegantThemes <= 1.2.3 - Privilege Escalation
High
CVE-2016-11004
Elegant Themes Monarch < 1.2.7 - Privilege Escalation
Critical
faed1198-b8c4-46b1-b6a6-5fc35cd7bdf8
Formidable Form Builder <= 2.0.21 - Missing Authorization Checks
Medium
a68f024d-b80d-4e6c-8420-5e0dde87d8f0
ALO EasyMail Newsletter <= 2.6.01 - Cross-Site Request Forgery
High
7ee267ff-b650-44a5-994b-3a22d34722e8
WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 - Arbitrary File Upload
Critical
761ec035-5961-45a5-8197-b5209df8bc3a
Jigoshop – Store Toolkit <= 1.3.8 - Missing Authorization Checks
Critical
668ba3a9-d53c-45ab-854f-1a9e83dd54b8
WP e-Commerce – Store Exporter <= 1.6.6 - Missing Authorization
Critical
588ece40-a848-4b2c-9db5-e63e0d11dda0
WP e-Commerce – Store Toolkit <= 2.0.1 - Missing Authorization
High
CVE-2016-0796
mb.miniAudioPlayer <= 1.7.6 - Multiple Vulnerabilities
High
CVE-2016-10923
Store Toolkit for WooCommerce <= 1.5.7 - Privilege Escalation
High
CVE-2016-11001
User Submitted Posts < 20160215 - Reflected Cross-Site Scripting
Critical
CVE-2016-10935
WooCommerce – Store Exporter <= 1.8.3 - Missing Authorization
Medium
CVE-2016-1000152
Easy Contact Form Builder < 1.1 - Cross-Site Scripting
Medium
CVE-2016-1000147
Recipes Writer <= 1.0.4 - Cross-Site Scripting
Medium
CVE-2016-1000150
Simplified Content < 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000128
Anti Plagiarism <= 3.60 - Reflected Cross-Site Scripting
Medium
aac6fcee-cb8b-4862-a1f1-9af692ae741f
Bulk change of posts terms and post types <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000126
Admin Font Editor <= 1.7 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000136
Heat Trackr < 1.01 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000146
Pondol Form to Mail <= 1.1 - Reflected Cross-Site Scripting
High
5cdbd5fd-bb12-4202-b6c7-f314ad8987f5
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress <= 9.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.