2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-20081 | HIGH | 8.7 | 0.6% | Jun 15, 2026 | WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attacke... |
| CVE-2016-20080 | MEDIUM | 6.9 | 0.4% | Jun 15, 2026 | WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that ... |
| CVE-2016-20079 | MEDIUM | 6.9 | 0.8% | Jun 15, 2026 | WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated at... |
| CVE-2016-20078 | MEDIUM | 6.9 | 0.7% | Jun 15, 2026 | WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers ... |
| CVE-2016-20077 | MEDIUM | 6.9 | 0.4% | Jun 15, 2026 | WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers ... |
| CVE-2016-20076 | HIGH | 8.7 | 0.6% | Jun 15, 2026 | WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrar... |
| CVE-2016-20075 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users... |
| CVE-2016-20074 | MEDIUM | 5.3 | 0.1% | Jun 15, 2026 | WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that allows attackers to pe... |
| CVE-2016-20073 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attacker... |
| CVE-2016-20072 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers... |
| CVE-2016-20071 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability tha... |
| CVE-2016-20070 | MEDIUM | 6.4 | 0.2% | Jun 15, 2026 | WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabili... |
| CVE-2016-20069 | HIGH | 8.8 | 0.2% | Jun 15, 2026 | WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shor... |
| CVE-2016-20068 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability tha... |
| CVE-2016-20067 | MEDIUM | 5.3 | 0.1% | Jun 15, 2026 | WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthoriz... |
| CVE-2016-20066 | HIGH | 7.2 | 0.2% | Jun 15, 2026 | WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malici... |
| CVE-2016-20065 | HIGH | 8.8 | 0.3% | Jun 9, 2026 | Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers... |
| CVE-2016-20064 | MEDIUM | 6.9 | 0.7% | Jun 9, 2026 | WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary f... |
| CVE-2016-20063 | HIGH | 7.1 | 0.2% | Jun 9, 2026 | Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitra... |
| CVE-2016-20062 | HIGH | 8.8 | 0.3% | Jun 9, 2026 | Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to ... |
| CVE-2016-20054 | MEDIUM | 4.3 | 0.1% | Apr 4, 2026 | Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative ... |
| CVE-2016-20061 | HIGH | 8.5 | 0.1% | Apr 4, 2026 | sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers ... |
| CVE-2016-20060 | HIGH | 8.5 | 0.2% | Apr 4, 2026 | Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attac... |
| CVE-2016-20059 | HIGH | 8.5 | 0.2% | Apr 4, 2026 | IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services... |
| CVE-2016-20058 | HIGH | 8.5 | 0.7% | Apr 4, 2026 | Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivi... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now