2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10982 | HIGH | 8.8 | 0.7% | Sep 17, 2019 | The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. |
| CVE-2016-10978 | HIGH | 8.8 | 0.7% | Sep 17, 2019 | The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF. |
| CVE-2016-10974 | HIGH | 8.8 | 0.7% | Sep 17, 2019 | The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS. |
| CVE-2016-10968 | HIGH | 8.8 | 1.6% | Sep 16, 2019 | The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation. |
| CVE-2016-10966 | HIGH | 7.5 | 2.6% | Sep 16, 2019 | The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. |
| CVE-2016-10965 | HIGH | 7.5 | 2.2% | Sep 16, 2019 | The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. |
| CVE-2016-10960 | HIGH | 8.8 | 9.0% | Sep 16, 2019 | The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php... |
| CVE-2016-10958 | HIGH | 7.5 | 1.9% | Sep 16, 2019 | The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admi... |
| CVE-2016-10956 | HIGH | 7.5 | 10.6% | Sep 16, 2019 | The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php. |
| CVE-2016-10951 | HIGH | 7.2 | 1.9% | Sep 13, 2019 | The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter. |
| CVE-2016-10950 | HIGH | 8.8 | 1.9% | Sep 13, 2019 | The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. |
| CVE-2016-10949 | HIGH | 8.8 | 1.6% | Sep 13, 2019 | The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization. |
| CVE-2016-10948 | HIGH | 8.1 | 1.7% | Sep 13, 2019 | The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function. |
| CVE-2016-10947 | HIGH | 7.2 | 1.5% | Sep 13, 2019 | The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin. |
| CVE-2016-10946 | HIGH | 8.8 | 0.8% | Sep 13, 2019 | The wp-d3 plugin before 2.4.1 for WordPress has CSRF. |
| CVE-2016-10945 | HIGH | 8.8 | 0.8% | Sep 13, 2019 | The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF. |
| CVE-2016-10944 | HIGH | 8.8 | 0.7% | Sep 13, 2019 | The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF. |
| CVE-2016-10943 | HIGH | 7.2 | 1.9% | Sep 13, 2019 | The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter. |
| CVE-2016-10940 | HIGH | 7.2 | 5.5% | Sep 13, 2019 | The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter. |
| CVE-2016-10939 | HIGH | 7.2 | 1.6% | Sep 13, 2019 | The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter. |
| CVE-2016-10937 | HIGH | 7.5 | 0.9% | Sep 8, 2019 | IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. |
| CVE-2016-10905 | HIGH | 7.8 | 0.6% | Aug 19, 2019 | An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gf... |
| CVE-2016-10884 | HIGH | 8.8 | 0.7% | Aug 14, 2019 | The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. |
| CVE-2016-10874 | HIGH | 8.8 | 0.7% | Aug 12, 2019 | The wp-database-backup plugin before 4.3.3 for WordPress has CSRF. |
| CVE-2016-5431 | HIGH | 7.5 | 0.8% | Aug 7, 2019 | The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now