Total
21765 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2018-13136 | 1 Ultimatemember | 1 Ultimate Member | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen. | |||||
| CVE-2016-10990 | 1 Wpcerber | 1 Cerber Security Antispam \& Malware Scan | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. | |||||
| CVE-2016-10975 | 1 Tonjoostudio | 1 Fluid-responsive-slideshow | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter. | |||||
| CVE-2016-10985 | 1 Smackcoders | 1 Echo Sign | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. | |||||
| CVE-2016-10988 | 1 Leenk | 1 Leenk.me | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer. | |||||
| CVE-2016-10986 | 1 Nerdcow | 1 Tweet Wheel | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret. | |||||
| CVE-2016-10984 | 1 Smackcoders | 1 Echo Sign | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. | |||||
| CVE-2016-10981 | 1 Kentothemes | 1 Kento-post-view-counter | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. | |||||
| CVE-2016-10987 | 1 Woocommerce | 1 Persian Woocommerce Sms | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS. | |||||
| CVE-2016-10979 | 1 Fossura | 1 Tag Miner | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS. | |||||
| CVE-2016-10980 | 1 Kentothemes | 1 Kento-post-view-counter | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. | |||||
| CVE-2018-7547 | 1 Lingyun | 1 Lyadmin | 2019-09-17 | 3.5 LOW | 4.8 MEDIUM |
| lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI. | |||||
| CVE-2019-15950 | 1 Redmineup | 1 Crm | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data. | |||||
| CVE-2019-15739 | 1 Gitlab | 1 Gitlab | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. | |||||
| CVE-2016-10957 | 1 Akal Project | 1 Akal | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter. | |||||
| CVE-2016-10964 | 1 Findshorty | 1 Dwnldr | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header. | |||||
| CVE-2016-10967 | 1 Creativeinteractivemedia | 1 Real3d Flipbook | 2019-09-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter. | |||||
| CVE-2016-10969 | 1 Supportflow Project | 1 Supportflow | 2019-09-16 | 4.3 MEDIUM | 6.1 MEDIUM |
| The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title. | |||||
| CVE-2016-10973 | 1 Brafton | 1 Brafton | 2019-09-16 | 4.3 MEDIUM | 6.1 MEDIUM |
| The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php. | |||||
| CVE-2016-10970 | 1 Supportflow Project | 1 Supportflow | 2019-09-16 | 4.3 MEDIUM | 6.1 MEDIUM |
| The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt. | |||||