Export limit exceeded: 344930 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (344930 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-10996 | 1 Optinmonster | 1 Optinmonster | 2024-11-21 | 5.3 Medium |
| The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak. | ||||
| CVE-2016-10995 | 1 Templatic | 1 Telvolution | 2024-11-21 | 9.8 Critical |
| The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php. | ||||
| CVE-2016-10994 | 1 Truemag Theme Project | 1 Truemag Theme | 2024-11-21 | 6.1 Medium |
| The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. | ||||
| CVE-2016-10993 | 1 Scoreme Project | 1 Scoreme | 2024-11-21 | 5.4 Medium |
| The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter. | ||||
| CVE-2016-10992 | 1 Codepeople | 1 Music Store | 2024-11-21 | 6.1 Medium |
| The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. | ||||
| CVE-2016-10991 | 1 Imdb-widget Project | 1 Imdb-widget | 2024-11-21 | 7.5 High |
| The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion. | ||||
| CVE-2016-10990 | 1 Wpcerber | 1 Cerber Security Antispam \& Malware Scan | 2024-11-21 | 6.1 Medium |
| The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. | ||||
| CVE-2016-10989 | 1 Leenk | 1 Leenk.me | 2024-11-21 | 8.8 High |
| The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF. | ||||
| CVE-2016-10988 | 1 Leenk | 1 Leenk.me | 2024-11-21 | 6.1 Medium |
| The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer. | ||||
| CVE-2016-10987 | 1 Woocommerce | 1 Persian Woocommerce Sms | 2024-11-21 | 6.1 Medium |
| The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS. | ||||
| CVE-2016-10986 | 1 Nerdcow | 1 Tweet Wheel | 2024-11-21 | 6.1 Medium |
| The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret. | ||||
| CVE-2016-10985 | 1 Smackcoders | 1 Echo Sign | 2024-11-21 | 6.1 Medium |
| The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. | ||||
| CVE-2016-10984 | 1 Smackcoders | 1 Echo Sign | 2024-11-21 | 6.1 Medium |
| The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. | ||||
| CVE-2016-10983 | 1 Ghost | 1 Ghost | 2024-11-21 | 6.5 Medium |
| The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data. | ||||
| CVE-2016-10982 | 1 Kentothemes | 1 Kento-post-view-counter | 2024-11-21 | 8.8 High |
| The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. | ||||
| CVE-2016-10981 | 1 Kentothemes | 1 Kento-post-view-counter | 2024-11-21 | 6.1 Medium |
| The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. | ||||
| CVE-2016-10980 | 1 Kentothemes | 1 Kento-post-view-counter | 2024-11-21 | 6.1 Medium |
| The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. | ||||
| CVE-2016-10979 | 1 Fossura | 1 Tag Miner | 2024-11-21 | 6.1 Medium |
| The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS. | ||||
| CVE-2016-10978 | 1 Fossura | 1 Tag Miner | 2024-11-21 | 8.8 High |
| The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF. | ||||
| CVE-2016-10977 | 1 Neliosoftware | 1 Nelio Ab Testing | 2024-11-21 | 6.5 Medium |
| The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. | ||||