Export limit exceeded: 425863 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 51987 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51,987

Export CSV
CVE-2016-10964

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Findshorty
Products
Dwnldr
CVE-2016-10961

The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Inkthemes
Products
Colorway
CVE-2016-10957

The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Akal Project
Products
Akal
CVE-2016-10928

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Onelogin
Products
Onelogin Saml Sso
CVE-2016-10925

The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Profilepress
Products
Loginwp
CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Sir
Products
Gnucommerce