Search
Search Results (322813 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-11010 | 1 Usabilitydynamics | 1 Wp-invoice | 2024-11-21 | 5.3 Medium |
| The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. | ||||
| CVE-2016-11009 | 1 Usabilitydynamics | 1 Wp-invoice | 2024-11-21 | 5.3 Medium |
| The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. | ||||
| CVE-2016-11008 | 1 Usabilitydynamics | 1 Wp-invoice | 2024-11-21 | 5.3 Medium |
| The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. | ||||
| CVE-2016-11007 | 1 Usabilitydynamics | 1 Wp-invoice | 2024-11-21 | 5.3 Medium |
| The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. | ||||
| CVE-2016-11006 | 1 Usabilitydynamics | 1 Wp-invoice | 2024-11-21 | 5.3 Medium |
| The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. | ||||
| CVE-2016-11005 | 1 Elfsight | 1 Instalinker | 2024-11-21 | 6.1 Medium |
| The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS. | ||||
| CVE-2016-11004 | 1 Elegantthemes | 1 Monarch | 2024-11-21 | 8.8 High |
| The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation. | ||||
| CVE-2016-11003 | 1 Elegantthemes | 1 Monarch | 2024-11-21 | 8.8 High |
| The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation. | ||||
| CVE-2016-11002 | 1 Elegantthemes | 1 Extra | 2024-11-21 | 8.8 High |
| The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation. | ||||
| CVE-2016-11001 | 1 Plugin-planet | 1 User Submitted Posts | 2024-11-21 | 6.1 Medium |
| The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. | ||||
| CVE-2016-11000 | 1 Smackcoders | 1 Ultimate Exporter | 2024-11-21 | 9.8 Critical |
| The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter. | ||||
| CVE-2016-10999 | 1 Momizat | 1 Goodnews | 2024-11-21 | 6.1 Medium |
| The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter. | ||||
| CVE-2016-10998 | 1 Ocimscripts | 1 Ocim-mp3 | 2024-11-21 | 6.1 Medium |
| The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS. | ||||
| CVE-2016-10997 | 1 Yourinspirationweb | 1 Beauty-premium | 2024-11-21 | 6.5 Medium |
| The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php. | ||||
| CVE-2016-10996 | 1 Optinmonster | 1 Optinmonster | 2024-11-21 | 5.3 Medium |
| The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak. | ||||
| CVE-2016-10995 | 1 Templatic | 1 Telvolution | 2024-11-21 | 9.8 Critical |
| The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php. | ||||
| CVE-2016-10994 | 1 Truemag Theme Project | 1 Truemag Theme | 2024-11-21 | 6.1 Medium |
| The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. | ||||
| CVE-2016-10993 | 1 Scoreme Project | 1 Scoreme | 2024-11-21 | 5.4 Medium |
| The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter. | ||||
| CVE-2016-10992 | 1 Codepeople | 1 Music Store | 2024-11-21 | 6.1 Medium |
| The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. | ||||
| CVE-2016-10991 | 1 Imdb-widget Project | 1 Imdb-widget | 2024-11-21 | 7.5 High |
| The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion. | ||||