Export limit exceeded: 425864 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 51987 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,987

Export CSV
CVE-2016-11005

The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Elfsight
Products
Instalinker
CVE-2016-10999

The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Momizat
Products
Goodnews
CVE-2016-10998

The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ocimscripts
Products
Ocim-mp3
CVE-2016-10992

The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Codepeople
Products
Music Store
CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Leenk
Products
Leenk.me
CVE-2016-10986

The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Nerdcow
Products
Tweet Wheel
CVE-2016-10985

The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Smackcoders
Products
Echo Sign
CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Smackcoders
Products
Echo Sign
CVE-2016-10981

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kentothemes
Products
Kento-post-view-counter
CVE-2016-10976

The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Kodebyraaet
Products
Safe Editor
CVE-2016-10973

The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.

CVSS 3.1 · 6.1 Medium EPSS 2.0% KEV · Not listed
Vendors
Brafton
Products
Brafton