CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal.

Source: CVE-2016-10924

CVE-2017-18576

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation.

Source: CVE-2017-18576

CVE-2016-10925

The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

Source: CVE-2016-10925

CVE-2016-10927

The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.

Source: CVE-2016-10927

CVE-2016-10923

The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.

Source: CVE-2016-10923

CVE-2014-10385

The memphis-documents-library plugin before 3.0 for WordPress has XSS via $_REQUEST.

Source: CVE-2014-10385

CVE-2014-10384

The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion.

Source: CVE-2014-10384

CVE-2014-10383

The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion.

Source: CVE-2014-10383

CVE-2013-7482

The reflex-gallery plugin before 1.4.3 for WordPress has XSS.

Source: CVE-2013-7482

CVE-2019-15318

The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.

Source: CVE-2019-15318