Search vulnerabilities

Expected end of text, found '/' (at char 51), (line:1, col:52)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,897

CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Codepeople
Products
Music Store
CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Leenk
Products
Leenk.me
CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Leenk
Products
Leenk.me
CVE-2016-10986

The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Nerdcow
Products
Tweet Wheel
CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Smackcoders
Products
Echo Sign
CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Smackcoders
Products
Echo Sign
CVE-2016-10983

The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Ghost
Products
Ghost
CVE-2016-10981

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kentothemes
Products
Kento-post-view-counter
CVE-2016-10976

The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Kodebyraaet
Products
Safe Editor