Medium
76a4dbcd-b3f3-48e9-8175-c701837ac2ae
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2016-10938
copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2016-10114
aWeb Cart Watching System
Unrated
392
DT Register - 3.1.12 / 2.8.18 and previous
High
CVE-2016-9964
bottle.py vulnerable to CRLF Injection
High
CVE-2016-10940
ZM Gallery <= 1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10939
Xtreme Locator Dealer Locator Plugin <= 3.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2016-10943
ZX_CSV Upload <= 1 - Authenticated (Admin+) SQL Injection
Medium
4aae4571-671a-46d7-b490-6cd0feced0af
WP Private Messages <= 1.0.1 - Authenticated SQL Injection
High
CVE-2016-11085
Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2016-10942
Podlove Podcast Publisher < 2.3.16 - SQL Injection
Medium
CVE-2016-10871
MailChimp for WordPress <= 4.0.10 - Reflected Cross-Site Scripting
High
c1690fe3-f03f-4640-9948-2109d73a841c
WP Support Plus Responsive Ticket System <= 7.1.4 - SQL Injection
Critical
7dc9dc1c-2d79-4dc3-9fee-be5d591d2400
Google Analytics Counter Tracker <= 3.4.1 - Unauthenticated PHP Object Injection
Critical
CVE-2016-15033
Delete All Comments <= 2.0 - Arbitrary File Upload
Critical
9d0c144b-609b-4b4a-bfb2-de38b5969a9e
BP Profile Search <= 4.5.3 - PHP Object Injection
High
CVE-2016-10944
Multisite Post Duplicator <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2016-10736
Grow Social <= 1.2.5 - Reflected Cross-Site Scripting
Medium
b024f6ce-c3ec-4ed9-a8ea-54f926e38443
WooCommerce Email Test <= 1.5 - Sensitive Data Exposure
High
CVE-2016-10926
Nelio AB Testing < 4.5.9 - Server Side Request Forgery
Medium
CVE-2016-10112
WooCommerce <= 2.6.8 - Authenticated Stored Cross-Site Scripting
Unrated
346
AVChat Video Chat Integration Kit - File permissions
High
c99e7f4c-ba91-4d64-b8d4-23940381e79a
Simple Personal Message < 2.0.0 - Authenticated SQL Injection
Critical
8911642f-6061-42a1-b733-8cc44b2870f1
Ultimate Member <= 1.3.75 - Missing Authorization to Password Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.