Medium
CVE-2016-15027
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2016-10888
All In One WP Security & Firewall <= 4.0.6 - SQL Injection
Low
e9f0689d-aa35-4dfb-b264-5d7378ab1a54
iThemes Security < 5.3.5 - Authenticated Cross-Site Scripting
Medium
CVE-2016-10865
Lightbox Plus <= 2.7.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2016-10901
Customer Reviews < 3.0.9 - Cross-Site Scripting
High
b7a57c3b-0d1b-40ad-9e55-6a1eab4e0380
User Role Editor <= 4.24 - Authenticated Privilege Escalation
Medium
CVE-2016-10993
ScoreMe <= 2016-04-01 - Cross-Site Scripting
High
CVE-2016-10990
Cerber Security, Anti-spam & Malware Scan < 2.7 - Stored Cross-Site Scripting
Medium
CVE-2016-1160
WP Favorite Posts <= 1.6.5 - Unauthenticated Cross-Site Scripting
High
CVE-2016-10924
Zedna eBook download < 1.2 - Directory Traversal
Medium
CVE-2016-10992
Music Store <= 1.0.41 - Cross-Site Scripting
High
b8d63789-16b3-443b-8dcb-67b1e5e25d20
Cloudflare < 1.3.21 - Cross-Site Scripting
Medium
7dc267d5-ecea-4732-b716-dfaf63167b81
Claptastic Clap! Button <= 1.3 - Cross-Site Scripting
High
CVE-2016-10991
IMDB Profile Widget < 1.0.9 - Local File Inclusion
Medium
3621801a-231b-4678-bfb5-fbf18e58a658
WP External Links < 1.81 - Authenticated Stored Cross-Site Scripting
High
f2febf69-b146-4ca5-bfa9-f5477da5cd6c
Memphis Documents Library <= 3.1.5 - Arbitrary File Download
Critical
240cc19a-9bae-4e69-a16f-46901daaa945
Brandfolder – Digital Asset Management Simplified. < 3.0.1 - Local/Remote File Inclusion
Medium
7dc9c0ed-a77c-4ad8-8e6e-75c1a2998fe6
Slideshow Gallery <= 1.6 - Cross-Site Scripting
Critical
CVE-2016-20082
A/B Test for WordPress <= 1.0.7 - Local File Inclusion
High
b100ba5a-8aad-4aa1-98bf-a09c5bde7bc1
Resume Submissions & Job Postings Plugin <= 2.5.3 - Stored Cross-Site Scripting
High
eab98c41-f0f2-4953-b9b3-c08e1e92c03a
BulletProof Security <= .53.2 - Cross-Site Scripting
High
7b834a3c-6af0-48fd-aa13-985d226b546d
Nextend Facebook Connect <= 1.5.8 - Cross-Site Request Forgery
Medium
d4c6d0ef-fe2c-4449-9e9c-135529a99575
Soundy Background Music <= 3.1 - Reflected Cross-Site Scripting
High
CVE-2016-6635
WordPress Core < 4.5 - Cross-Site Request Forgery via wp_ajax_wp_compression_test
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.