Search
Search Results (324388 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-10977 | 1 Neliosoftware | 1 Nelio Ab Testing | 2024-11-21 | 6.5 Medium |
| The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. | ||||
| CVE-2016-10976 | 1 Kodebyraaet | 1 Safe Editor | 2024-11-21 | 6.1 Medium |
| The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS. | ||||
| CVE-2016-10975 | 1 Tonjoostudio | 1 Fluid-responsive-slideshow | 2024-11-21 | 6.1 Medium |
| The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter. | ||||
| CVE-2016-10974 | 1 Tonjoostudio | 1 Fluid-responsive-slideshow | 2024-11-21 | 8.8 High |
| The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS. | ||||
| CVE-2016-10973 | 1 Brafton | 1 Brafton | 2024-11-21 | 6.1 Medium |
| The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php. | ||||
| CVE-2016-10972 | 1 Tagdiv | 1 Newspaper | 2024-11-21 | 9.8 Critical |
| The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel. | ||||
| CVE-2016-10971 | 1 Membersonic | 1 Membersonic | 2024-11-21 | 9.8 Critical |
| The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required. | ||||
| CVE-2016-10970 | 1 Supportflow Project | 1 Supportflow | 2024-11-21 | 6.1 Medium |
| The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt. | ||||
| CVE-2016-10969 | 1 Supportflow Project | 1 Supportflow | 2024-11-21 | 6.1 Medium |
| The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title. | ||||
| CVE-2016-10968 | 1 Peepso | 1 Peepso | 2024-11-21 | 8.8 High |
| The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation. | ||||
| CVE-2016-10967 | 1 Creativeinteractivemedia | 1 Real3d Flipbook | 2024-11-21 | 6.1 Medium |
| The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter. | ||||
| CVE-2016-10966 | 1 Creativeinteractivemedia | 1 Real3d Flipbook | 2024-11-21 | 7.5 High |
| The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. | ||||
| CVE-2016-10965 | 1 Creativeinteractivemedia | 1 Real3d Flipbook | 2024-11-21 | 7.5 High |
| The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. | ||||
| CVE-2016-10964 | 1 Findshorty | 1 Dwnldr | 2024-11-21 | 6.1 Medium |
| The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header. | ||||
| CVE-2016-10963 | 1 Icegram | 1 Icegram Engage | 2024-11-21 | 6.1 Medium |
| The icegram plugin before 1.9.19 for WordPress has XSS. | ||||
| CVE-2016-10962 | 1 Icegram | 1 Icegram Engage | 2024-11-21 | 6.5 Medium |
| The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter. | ||||
| CVE-2016-10961 | 1 Inkthemes | 1 Colorway | 2024-11-21 | 6.1 Medium |
| The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter. | ||||
| CVE-2016-10960 | 1 Joomlaserviceprovider | 1 Wsecure | 2024-11-21 | 8.8 High |
| The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter. | ||||
| CVE-2016-10959 | 1 Estatik | 1 Estatik | 2024-11-21 | 6.5 Medium |
| The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php. | ||||
| CVE-2016-10958 | 1 Estatik | 1 Estatik | 2024-11-21 | 7.5 High |
| The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. | ||||