2016 CVEs (page 4)
Page 4 of 107 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-2358 | Critical | 9.8 | 2019-10-25 | Milesight IP security cameras through 2016-11-14 have a default set of 10 privileged accounts with hardcoded credentials. They are accessible if the customer h… |
CVE-2016-2357 | Critical | 9.8 | 2019-10-25 | Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory. |
CVE-2016-2356 | Critical | 9.8 | 2019-10-25 | Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password. |
CVE-2016-11016 | Medium | 6.1 | 2019-10-16 | NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. |
CVE-2016-11015 | Medium | 6.5 | 2019-10-16 | NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter. |
CVE-2016-11014 | Critical | 9.8 | 2019-10-16 | NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case. |
CVE-2016-11013 | Medium | 6.1 | 2019-09-20 | The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS. |
CVE-2016-11012 | Medium | 5.4 | 2019-09-20 | The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS. |
CVE-2016-11011 | Medium | 6.5 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation. |
CVE-2016-11010 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. |
CVE-2016-11009 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. |
CVE-2016-11008 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. |
CVE-2016-11007 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. |
CVE-2016-11006 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. |
CVE-2016-11005 | Medium | 6.1 | 2019-09-20 | The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS. |
CVE-2016-11004 | High | 8.8 | 2019-09-20 | The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation. |
CVE-2016-11003 | High | 8.8 | 2019-09-20 | The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation. |
CVE-2016-11002 | High | 8.8 | 2019-09-20 | The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation. |
CVE-2016-11001 | Medium | 6.1 | 2019-09-20 | The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field. |
CVE-2016-11000 | Critical | 9.8 | 2019-09-20 | The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter. |
CVE-2016-10999 | Medium | 6.1 | 2019-09-20 | The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter. |
CVE-2016-10998 | Medium | 6.1 | 2019-09-20 | The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS. |
CVE-2016-10997 | Medium | 6.5 | 2019-09-20 | The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php. |
CVE-2016-10996 | Medium | 5.3 | 2019-09-20 | The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak. |
CVE-2016-10995 | Critical | 9.8 | 2019-09-18 | The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php. |
CVE-2016-10994 | Medium | 6.1 | 2019-09-18 | The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter. |
CVE-2016-10993 | Medium | 5.4 | 2019-09-17 | The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter. |
CVE-2016-10992 | Medium | 6.1 | 2019-09-17 | The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. |
CVE-2016-10991 | High | 7.5 | 2019-09-17 | The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion. |
CVE-2016-10990 | Medium | 6.1 | 2019-09-17 | The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header. |
CVE-2016-10989 | High | 8.8 | 2019-09-17 | The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF. |
CVE-2016-10988 | Medium | 6.1 | 2019-09-17 | The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or… |
CVE-2016-10987 | Medium | 6.1 | 2019-09-17 | The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS. |
CVE-2016-10986 | Medium | 6.1 | 2019-09-17 | The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret. |
CVE-2016-10985 | Medium | 6.1 | 2019-09-17 | The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. |
CVE-2016-10984 | Medium | 6.1 | 2019-09-17 | The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. |
CVE-2016-10983 | Medium | 6.5 | 2019-09-17 | The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data. |
CVE-2016-10982 | High | 8.8 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. |
CVE-2016-10981 | Medium | 6.1 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. |
CVE-2016-10980 | Medium | 6.1 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. |
CVE-2016-10979 | Medium | 6.1 | 2019-09-17 | The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS. |
CVE-2016-10978 | High | 8.8 | 2019-09-17 | The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF. |
CVE-2016-10977 | Medium | 6.5 | 2019-09-17 | The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. |
CVE-2016-10976 | Medium | 6.1 | 2019-09-17 | The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS. |
CVE-2016-10975 | Medium | 6.1 | 2019-09-17 | The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter. |
CVE-2016-10974 | High | 8.8 | 2019-09-17 | The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS. |
CVE-2016-10973 | Medium | 6.1 | 2019-09-16 | The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php. |
CVE-2016-10972 | Critical | 9.8 | 2019-09-16 | The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel. |
CVE-2016-10971 | Critical | 9.8 | 2019-09-16 | The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required. |
CVE-2016-10970 | Medium | 6.1 | 2019-09-16 | The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt. |
CVE-2016-10969 | Medium | 6.1 | 2019-09-16 | The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title. |
CVE-2016-10968 | High | 8.8 | 2019-09-16 | The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation. |
CVE-2016-10967 | Medium | 6.1 | 2019-09-16 | The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter. |
CVE-2016-10966 | High | 7.5 | 2019-09-16 | The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. |
CVE-2016-10965 | High | 7.5 | 2019-09-16 | The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. |
CVE-2016-10964 | Medium | 6.1 | 2019-09-16 | The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header. |
CVE-2016-10963 | Medium | 6.1 | 2019-09-16 | The icegram plugin before 1.9.19 for WordPress has XSS. |
CVE-2016-10962 | Medium | 6.5 | 2019-09-16 | The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter. |
CVE-2016-10961 | Medium | 6.1 | 2019-09-16 | The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter. |
CVE-2016-10960 | High | 8.8 | 2019-09-16 | The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter. |
CVE-2016-10959 | Medium | 6.5 | 2019-09-16 | The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php. |
CVE-2016-10958 | High | 7.5 | 2019-09-16 | The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. |
CVE-2016-10957 | Medium | 6.1 | 2019-09-16 | The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter. |
CVE-2016-10956 | High | 7.5 | 2019-09-16 | The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php. |
CVE-2016-10955 | Critical | 9.8 | 2019-09-13 | The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking. |
CVE-2016-10954 | Critical | 9.8 | 2019-09-13 | The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload. |
CVE-2016-10953 | Medium | 5.4 | 2019-09-13 | The Headway theme before 3.8.9 for WordPress has XSS via the license key field. |
CVE-2016-10952 | Medium | 6.1 | 2019-09-13 | The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter. |
CVE-2016-10951 | High | 7.2 | 2019-09-13 | The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter. |
CVE-2016-10950 | High | 8.8 | 2019-09-13 | The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. |
CVE-2016-10949 | High | 8.8 | 2019-09-13 | The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization. |
CVE-2016-10948 | High | 8.1 | 2019-09-13 | The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function. |
CVE-2016-10947 | High | 7.2 | 2019-09-13 | The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin. |
CVE-2016-10946 | High | 8.8 | 2019-09-13 | The wp-d3 plugin before 2.4.1 for WordPress has CSRF. |
CVE-2016-10945 | High | 8.8 | 2019-09-13 | The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF. |
CVE-2016-10944 | High | 8.8 | 2019-09-13 | The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF. |
CVE-2016-10943 | High | 7.2 | 2019-09-13 | The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter. |
CVE-2016-10942 | Critical | 9.8 | 2019-09-13 | The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF. |
CVE-2016-10941 | Medium | 6.1 | 2019-09-13 | The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF. |
CVE-2016-10940 | High | 7.2 | 2019-09-13 | The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter. |
CVE-2016-10939 | High | 7.2 | 2019-09-13 | The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter. |
CVE-2016-10938 | Medium | 6.5 | 2019-09-13 | The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location. |
CVE-2016-10937 | High | 7.5 | 2019-09-08 | IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. |
CVE-2016-7398 | Critical | 9.8 | 2019-09-06 | A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0b… |
CVE-2016-10936 | Medium | 6.1 | 2019-08-27 | The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option. |
CVE-2016-10935 | Critical | 9.8 | 2019-08-27 | The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. |
CVE-2016-10934 | Medium | 6.1 | 2019-08-27 | The check-email plugin before 0.5.2 for WordPress has XSS. |
CVE-2016-10933 | Medium | 5.9 | 2019-08-26 | An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext… |
CVE-2016-10932 | Medium | 4.8 | 2019-08-26 | An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification wa… |
CVE-2016-10931 | High | 8.1 | 2019-08-26 | An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off… |
CVE-2016-6154 | Medium | 6.1 | 2019-08-23 | The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect). |
CVE-2016-10929 | Medium | 5.3 | 2019-08-22 | The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in. |
CVE-2016-10928 | High | 7.5 | 2019-08-22 | The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users. |
CVE-2016-10930 | Critical | 9.8 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number. |
CVE-2016-10927 | Critical | 10.0 | 2019-08-22 | The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. |
CVE-2016-10926 | Critical | 10.0 | 2019-08-22 | The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php. |
CVE-2016-10925 | Medium | 6.1 | 2019-08-22 | The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs. |
CVE-2016-10924 | High | 7.5 | 2019-08-22 | The ebook-download plugin before 1.2 for WordPress has directory traversal. |
CVE-2016-10923 | Critical | 9.8 | 2019-08-22 | The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation. |
CVE-2016-10922 | Critical | 9.8 | 2019-08-22 | The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation. |