Medium
6278c70a-7b25-45f0-bc64-ecb231e1bf55
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2016-10959
Estatik <= 2.3.0 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2016-10875
WP Database Backup <= 4.3 - Cross-Site Scripting
Medium
06ec9ff7-1dd5-4b9b-8f15-cd9523a708a1
ALO EasyMail Newsletter <= 2.9.2 - Cross-Site Request Forgery
High
ff9cfa56-e178-4de7-9e6b-e0a520153eb2
Easy Testimonials <= 1.36.1 - Authenticated Stored Cross-Site Scripting
Medium
352a0c8a-22a6-44d9-917c-5fb37569d143
All In One WP Security & Firewall <= 4.1.2 - Captcha Bypass
Medium
CVE-2016-10936
WP-Polls <= 2.73 - Cross-Site Scripting
Medium
633a9cbf-451d-4fd1-822b-ef8966ff9a1a
Activity Log <= 2.3.2 - Reflected Cross-Site Scripting
Medium
3b8282a2-8265-4fa0-b137-6272b9e44fc3
W3 Total Cache <= 0.9.4.1 - Cross-Site Scripting via request_id
Medium
62e01d59-e649-4b84-993b-9faf28a24274
Simple History Plugin < 2.7.5 - Sensitive Information Disclosure
Medium
CVE-2016-10878
WP Google Map Plugin <= 3.1.1 - Cross-Site Scripting
Medium
42d56d6a-365a-4fa2-977f-a1328e0ec1b3
Clicky by Yoast <= 1.5 - Stored Cross-Site Scripting
Medium
e10a95e3-e834-4f84-85c1-4a1ffad41b5b
WooCommerce <= 2.6.3 - Stored Cross-Site Scripting via REST-API
Medium
cae1e984-95b2-4b76-b6b3-563dc3104a72
Woo Custom Checkout Field < 1.3.5 - Cross-Site Scripting
Unrated
380
Payplans SQLi
Medium
CVE-2016-10899
Total Security <= 3.4.0 - Unauthenticated Settings Change
Medium
CVE-2016-10898
Total Security <= 3.4 - Cross-Site Scripting
High
2ae70225-3597-463b-907c-d2a3a7bcecb4
WooCommerce Stock Manager < 1.0.9 - Authorization Bypass
Medium
fd0c3965-6b35-46a8-8cf0-6726cdb03c8f
Code Snippets < 2.7.0 - Reflected Cross-Site Scripting
High
c77295f3-0a37-4fa8-a375-b4bd3dc55945
Contact Form Email < 1.1.48 - Reflected Cross-Site Scripting
Medium
CVE-2017-5942
WP Mail <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2016-4833
Nofollow Links <= 1.0.10 - Cross-Site Scripting
High
06187bf0-7e3b-49c0-9f34-3d717e8d8ece
Lazy Load < 0.6.1 - Authenticated Stored Cross-Site Scripting
Medium
e01532bb-3011-4efe-b072-d0df5708f8e9
Ninja Forms Contact Form <= 2.9.51 - Multiple Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.