Medium
CVE-2016-10934
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2016-20073
Answer My Question <= 1.3 - SQL Injection
Medium
CVE-2016-10866
All In One WP Security & Firewall <= 4.1.9 - Reflected Cross-Site Scripting
High
0448eb1c-1a4a-465e-aa30-e4af10d27560
Mini Cart <= 1.00.1 - Authenticated (Admin+) SQL Injection
Unrated
388
JoomDoc
Medium
a739b805-e631-461e-802f-196e4117d403
WP Google Maps <= 6.3.14 - Stored Cross-Site Scripting
High
CVE-2016-10950
Image Optimizer, Resizer and CDN – Sirv < 1.3.2 - SQL Injection
High
9373c82d-15a8-495a-8290-1b85c096f7e5
W3 Total Cache <= 0.9.4.1 - Weak validation of Amazon SNS push messages
High
CVE-2016-10951
FireStorm Shopping Cart eCommerce Plugin <= 2.07.02 - SQL Injection
High
ff22c969-e580-4290-ab08-7c02b6eac938
Calendar < 1.3.8 - Reflected Cross-Site Scripting
High
fe02377a-8d09-4d86-a049-3002516cf933
YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object Injection
Medium
fc3d84f3-bd9d-40e6-bc88-90c840a928c0
Caldera Forms <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
f28ca2dc-404d-4abf-9d44-1b1f8309e9ee
Post Grid <= 2.0.12 - Arbitrary File Deletion
Medium
CVE-2016-10952
Quotes Collection < 2.0.6 - Cross-Site Scripting
Medium
CVE-2016-10919
WassUp Real Time Analytics < 1.9.1 - Cross-Site Scripting
High
CVE-2016-9190
Arbitrary code using "crafted image file" approach affecting Pillow
Medium
CVE-2016-9189
Pillow Integer overflow in Map.c
Medium
d4170426-b418-48ec-8233-1ca1aca60473
DW Question & Answer < 1.4.2.3 - Stored Cross-Site Scripting
High
b09c6da0-14d8-4e44-95bd-b5b6b0df97e9
W3 Total Cache <= 0.9.4 - Server-Side Request Forgery leading to Host Information Disclosure
High
CVE-2016-10903
GoDaddy Email Marketing < 1.1.4 - Cross-Site Request Forgery
Unrated
387
HDW Player - 3.2.1 and older
High
76f9d37e-1339-4267-aaf6-38a591e97fa2
WP Database Backup <= 4.3.5 - Cross-Site Request Forgery
Critical
19f737a8-21e6-49d3-95b9-24fb6e5d7af7
InPost Gallery < 2.1.2.1 - Local File Inclusion
Unrated
386
ja-k2- filter-and- search - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.