Medium
CVE-2016-1000126
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2016-1000136
Heat Trackr < 1.01 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000146
Pondol Form to Mail <= 1.1 - Reflected Cross-Site Scripting
High
5cdbd5fd-bb12-4202-b6c7-f314ad8987f5
Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress <= 9.3 - Missing Authorization
Medium
3f753961-3eeb-402d-876f-4a4dea41a96a
Duplicator < 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2016-1000130
E-Search <= 1.0 - Reflected Cross-Site Scripting via title_az parameter
Medium
CVE-2016-1000140
New Year Firework <= 1.1.9 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000127
AJAX Random Post <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2016-1000144
Photoxhibit <= 2.1.8 - Reflected Cross-Site Scripting
High
CVE-2016-20068
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Critical
CVE-2016-10909
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Medium
CVE-2016-10908
Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting
Medium
cd88b116-0a6e-412b-8d43-024fdf36bcdf
Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 - Authorization Bypass
Critical
8a2186c9-fa27-4d7d-be41-c82711c49334
WP User Frontend < 2.3.11 - Arbitrary File Upload
Medium
3f0b212a-969b-4cd3-a31c-40b9ff9dce5f
Image Gallery – Responsive Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting via linkbutton
High
CVE-2016-10922
Store Toolkit for WooCommerce <= 1.5.6 - Missing Authorization
Medium
CVE-2016-11005
Elfsight Instagram Widget – Instagram Gallery < 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2016-10912
Universal Analytics <= 1.3.0 - Cross-Site Scripting
Medium
CVE-2016-11008
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
High
CVE-2016-11011
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Privilege Escalation
Medium
CVE-2016-11009
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
Medium
CVE-2016-11010
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Missing Authorization
Medium
CVE-2016-11007
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Insecure Direct Object Reference
Medium
CVE-2016-11006
WP-Invoice – Web Invoice and Billing <= 4.1.0 - Unauthorized Settings Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.