Search vulnerabilities

Expected end of text, found ',' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,467

CVE-2016-11005

The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Elfsight
Products
Instalinker
CVE-2016-11004

The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Elegantthemes
Products
Monarch
CVE-2016-11002

The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Elegantthemes
Products
Extra
CVE-2016-10999

The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Momizat
Products
Goodnews
CVE-2016-10998

The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ocimscripts
Products
Ocim-mp3
CVE-2016-10996

The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.

CVSS 3.1 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Optinmonster
Products
Optinmonster
CVE-2016-10995

The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Templatic
Products
Telvolution
CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Codepeople
Products
Music Store
CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Leenk
Products
Leenk.me
CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Leenk
Products
Leenk.me
CVE-2016-10986

The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Nerdcow
Products
Tweet Wheel
CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Smackcoders
Products
Echo Sign