Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10885 State: PUBLISHED Published: 2019-08-14T15:25:55 Last Updated: 2024-08-06T03:38:56.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-editor plugin before 1.2.6 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-editor/#developers
CVE ID: CVE-2016-10886 State: PUBLISHED Published: 2019-08-14T15:25:29 Last Updated: 2024-08-06T03:38:56.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-editor/#developers
CVE ID: CVE-2016-10887 State: PUBLISHED Published: 2019-08-14T15:20:27 Last Updated: 2024-08-06T03:38:56.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE ID: CVE-2016-10888 State: PUBLISHED Published: 2019-08-14T15:19:24 Last Updated: 2024-08-06T03:38:56.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE ID: CVE-2016-10889 State: PUBLISHED Published: 2019-08-14T14:50:58 Last Updated: 2024-08-06T03:38:56.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nextgen-gallery/#developers
CVE ID: CVE-2016-10890 State: PUBLISHED Published: 2019-08-21T18:21:36 Last Updated: 2024-08-06T03:38:56.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aryo-activity-log plugin before 2.3.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/aryo-activity-log/#developers
CVE ID: CVE-2016-10891 State: PUBLISHED Published: 2019-08-21T18:20:54 Last Updated: 2024-08-06T03:38:56.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aryo-activity-log plugin before 2.3.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/aryo-activity-log/#developers
CVE ID: CVE-2016-10892 State: PUBLISHED Published: 2019-08-20T15:03:04 Last Updated: 2024-08-06T03:38:56.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/chained-quiz/#developers
CVE ID: CVE-2016-10893 State: PUBLISHED Published: 2019-08-20T00:00:00 Last Updated: 2024-08-06T03:38:56.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/crayon-syntax-highlighter/#developers - https://github.com/aramk/crayon-syntax-highlighter/issues/347 - https://github.com/aramk/crayon-syntax-highlighter/commit/7fdb2e6b4c65178b4ed01ff08a8a38afe5a5151e
CVE ID: CVE-2016-10894 State: PUBLISHED Published: 2019-08-16T03:00:37 Last Updated: 2024-08-06T03:38:56.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the touchpad once and then clicking with a different finger). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/830726 - https://lists.debian.org/debian-lts-announce/2019/10/msg00019.html
CVE ID: CVE-2016-10895 State: PUBLISHED Published: 2019-08-20T15:28:15 Last Updated: 2024-08-06T03:38:56.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/option-tree/#developers
CVE ID: CVE-2016-10896 State: PUBLISHED Published: 2019-08-21T11:38:57 Last Updated: 2024-08-06T03:38:56.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seo-redirection plugin before 4.3 for WordPress has stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/seo-redirection/#developers
CVE ID: CVE-2016-10897 State: PUBLISHED Published: 2019-08-21T11:42:14 Last Updated: 2024-08-06T03:38:56.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sermon-browser/#developers
CVE ID: CVE-2016-10898 State: PUBLISHED Published: 2019-08-21T11:53:18 Last Updated: 2024-08-06T03:38:56.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The total-security plugin before 3.4.1 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/total-security/#developers
CVE ID: CVE-2016-10899 State: PUBLISHED Published: 2019-08-21T11:51:58 Last Updated: 2024-08-06T03:38:56.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/total-security/#developers
CVE ID: CVE-2016-10900 State: PUBLISHED Published: 2019-08-21T12:39:15 Last Updated: 2024-08-06T03:38:56.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uji-countdown plugin before 2.0.7 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/uji-countdown/#developers
CVE ID: CVE-2016-10901 State: PUBLISHED Published: 2019-08-21T12:42:33 Last Updated: 2024-08-06T03:38:56.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-customer-reviews/#developers
CVE ID: CVE-2016-10902 State: PUBLISHED Published: 2019-08-21T12:45:25 Last Updated: 2024-08-06T03:38:56.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-customer-reviews/#developers
CVE ID: CVE-2016-10903 State: PUBLISHED Published: 2019-08-21T12:47:12 Last Updated: 2024-08-06T03:38:56.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/godaddy-email-marketing-sign-up-forms/#developers
CVE ID: CVE-2016-10904 State: PUBLISHED Published: 2019-08-16T13:41:58 Last Updated: 2024-08-06T03:38:56.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The olimometer plugin before 2.57 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/olimometer/#developers
CVE ID: CVE-2016-10905 State: PUBLISHED Published: 2019-08-19T01:52:24 Last Updated: 2024-08-06T03:38:56.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=36e4ad0316c017d5b271378ed9a1c9a4b77fab5f - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K31332013 - https://support.f5.com/csp/article/K31
- https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K31332013 - https://support.f5.com/csp/article/K31332013?utm_source=f5support&amp%3Butm_medium=RSS - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
CVE ID: CVE-2016-10906 State: PUBLISHED Published: 2019-08-19T01:52:09 Last Updated: 2024-08-06T03:38:56.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c278c253f3d992c6994d08aa0efb2b6806ca396f - https://support.f5.com/csp/article/K01993501?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/
p/article/K01993501?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/ - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
CVE ID: CVE-2016-10907 State: PUBLISHED Published: 2019-08-19T01:51:19 Last Updated: 2024-08-06T03:38:56.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755_parse_dt. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d47964bfd471f0dd4c89f28556aec68bffa0020 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.6 - https://support.f5.com/csp/article/K79609038 - https://support.f5.com/csp/article/K79609038?utm_source=f5support&amp%3Butm_medium=R
port.f5.com/csp/article/K79609038 - https://support.f5.com/csp/article/K79609038?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2016-10908 State: PUBLISHED Published: 2019-08-21T12:40:47 Last Updated: 2024-08-06T03:38:56.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/booking-calendar-contact-form/#developers
CVE ID: CVE-2016-10909 State: PUBLISHED Published: 2019-08-21T12:44:11 Last Updated: 2024-08-06T03:38:56.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/booking-calendar-contact-form/#developers
CVE ID: CVE-2016-10910 State: PUBLISHED Published: 2019-08-21T17:47:52 Last Updated: 2024-08-06T03:38:56.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The formbuilder plugin before 1.06 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/formbuilder/#developers
CVE ID: CVE-2016-10911 State: PUBLISHED Published: 2019-08-21T17:46:19 Last Updated: 2024-08-06T03:38:56.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/profile-builder/#developers
CVE ID: CVE-2016-10912 State: PUBLISHED Published: 2019-08-21T17:18:23 Last Updated: 2024-08-06T03:38:56.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: The universal-analytics plugin before 1.3.1 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/universal-analytics/#developers
CVE ID: CVE-2016-10913 State: PUBLISHED Published: 2019-08-20T14:56:19 Last Updated: 2024-08-06T03:38:56.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-latest-posts/#developers
CVE ID: CVE-2016-10914 State: PUBLISHED Published: 2019-08-20T14:55:36 Last Updated: 2024-08-06T03:38:56.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/add-from-server/#developers
CVE ID: CVE-2016-10915 State: PUBLISHED Published: 2019-08-20T14:52:50 Last Updated: 2024-08-06T03:38:56.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/popup-by-supsystic/#developers
CVE ID: CVE-2016-10916 State: PUBLISHED Published: 2019-08-22T12:11:21 Last Updated: 2024-08-06T03:38:56.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/appointment-booking-calendar/#developers
CVE ID: CVE-2016-10917 State: PUBLISHED Published: 2019-08-22T12:18:41 Last Updated: 2024-08-06T03:38:56.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/search-everything/#developers
CVE ID: CVE-2016-10918 State: PUBLISHED Published: 2019-08-22T12:23:13 Last Updated: 2024-08-06T03:38:56.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gallery-by-supsystic/#developers
CVE ID: CVE-2016-10919 State: PUBLISHED Published: 2019-08-22T12:24:39 Last Updated: 2024-08-06T03:38:56.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wassup/#developers
CVE ID: CVE-2016-10920 State: PUBLISHED Published: 2019-08-22T12:32:39 Last Updated: 2024-08-06T03:38:56.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gnucommerce/#developers
CVE ID: CVE-2016-10921 State: PUBLISHED Published: 2019-08-22T12:33:51 Last Updated: 2024-08-06T03:38:56.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gallery-photo-gallery/#developers
CVE ID: CVE-2016-10922 State: PUBLISHED Published: 2019-08-22T13:00:56 Last Updated: 2024-08-06T03:38:56.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-store-toolkit/#developers
CVE ID: CVE-2016-10923 State: PUBLISHED Published: 2019-08-22T13:02:09 Last Updated: 2024-08-06T03:38:56.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-store-toolkit/#developers
CVE ID: CVE-2016-10924 State: PUBLISHED Published: 2019-08-22T13:04:48 Last Updated: 2024-08-06T03:38:56.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ebook-download plugin before 1.2 for WordPress has directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ebook-download/#developers
CVE ID: CVE-2016-10925 State: PUBLISHED Published: 2019-08-22T13:10:59 Last Updated: 2024-08-06T03:38:56.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/peters-login-redirect/#developers
CVE ID: CVE-2016-10926 State: PUBLISHED Published: 2019-08-22T13:21:52 Last Updated: 2024-08-06T03:38:56.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nelio-ab-testing/#developers
CVE ID: CVE-2016-10927 State: PUBLISHED Published: 2019-08-22T13:22:53 Last Updated: 2024-08-06T03:38:56.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/nelio-ab-testing/#developers
CVE ID: CVE-2016-10928 State: PUBLISHED Published: 2019-08-22T19:40:39 Last Updated: 2024-08-06T03:38:56.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/onelogin-saml-sso/#developers - https://github.com/onelogin/wordpress-saml/commit/fbe808e2fd8fde8cb7e6bf365c5334b5702262da
CVE ID: CVE-2016-10929 State: PUBLISHED Published: 2019-08-22T19:39:22 Last Updated: 2024-08-06T03:38:56.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/advanced-ajax-page-loader/#developers
CVE ID: CVE-2016-10930 State: PUBLISHED Published: 2019-08-22T18:57:31 Last Updated: 2024-08-06T03:38:56.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE ID: CVE-2016-10931 State: PUBLISHED Published: 2019-08-26T12:00:16 Last Updated: 2024-08-06T03:38:56.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2016-0001.html
CVE ID: CVE-2016-10932 State: PUBLISHED Published: 2019-08-26T12:01:57 Last Updated: 2024-08-06T03:38:56.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2016-0002.html
CVE ID: CVE-2016-10933 State: PUBLISHED Published: 2019-08-26T12:03:36 Last Updated: 2024-08-06T03:38:56.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2016-0003.html
CVE ID: CVE-2016-10934 State: PUBLISHED Published: 2019-08-27T11:48:33 Last Updated: 2024-08-06T03:38:56.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check-email plugin before 0.5.2 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/check-email/#developers
CVE ID: CVE-2016-10935 State: PUBLISHED Published: 2019-08-27T11:59:00 Last Updated: 2024-08-06T03:38:56.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-exporter/#developers - https://wpvulndb.com/vulnerabilities/9825
CVE ID: CVE-2016-10936 State: PUBLISHED Published: 2019-08-27T12:04:29 Last Updated: 2024-08-06T03:38:56.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-polls/#developers
CVE ID: CVE-2016-10937 State: PUBLISHED Published: 2019-09-08T15:07:10 Last Updated: 2024-08-06T03:38:56.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lefcha/imapfilter/issues/142 - https://bugs.debian.org/939702 - https://lists.debian.org/debian-lts-announce/2019/10/msg00040.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBNDFMAIUA6PQMV2P6OKIP7JZQEWX7D2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQUH
6OKIP7JZQEWX7D2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQUH2TOCNEST7JB2RJVVJT3RZS5XZCFZ/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00002.html
CVE ID: CVE-2016-10938 State: PUBLISHED Published: 2019-09-13T11:46:28 Last Updated: 2024-08-06T03:38:56.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8706 - https://wordpress.org/plugins/copy-me/#developers - https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/