Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10939 State: PUBLISHED Published: 2019-09-13T11:47:37 Last Updated: 2024-08-06T03:38:56.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/xtremelocator/#developers - http://lenonleite.com.br/en/blog/2016/12/16/xtreme-locator-dealer-locator-plugin-wordpress-sql-injection/
CVE ID: CVE-2016-10940 State: PUBLISHED Published: 2019-09-13T11:49:11 Last Updated: 2024-08-06T03:38:56.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/zm-gallery/#developers - http://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/
CVE ID: CVE-2016-10941 State: PUBLISHED Published: 2019-09-13T11:52:23 Last Updated: 2024-08-06T03:38:56.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers - https://blog.ripstech.com/2016/the-state-of-wordpress-security/ - https://github.com/podlove/podlove-publisher/blob/master/changelog.txt
CVE ID: CVE-2016-10942 State: PUBLISHED Published: 2019-09-13T11:53:42 Last Updated: 2024-08-06T03:38:56.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers - https://blog.ripstech.com/2016/the-state-of-wordpress-security/ - https://github.com/podlove/podlove-publisher/blob/master/changelog.txt
CVE ID: CVE-2016-10943 State: PUBLISHED Published: 2019-09-13T11:55:38 Last Updated: 2024-08-06T03:38:56.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8702 - https://wordpress.org/plugins/zx-csv-upload/#developers - http://lenonleite.com.br/en/2016/12/16/english-zx_csv-upload-1-plugin-wordpress-sql-injection/
CVE ID: CVE-2016-10944 State: PUBLISHED Published: 2019-09-13T11:57:15 Last Updated: 2024-08-06T03:38:56.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/multisite-post-duplicator/#developers - https://advisories.dxw.com/advisories/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do/
CVE ID: CVE-2016-10945 State: PUBLISHED Published: 2019-09-13T12:00:10 Last Updated: 2024-08-06T03:38:56.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8681 - https://klikki.fi/adv/pagelines.html
CVE ID: CVE-2016-10946 State: PUBLISHED Published: 2019-09-13T12:01:34 Last Updated: 2024-08-06T03:38:56.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-d3 plugin before 2.4.1 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8679 - https://wordpress.org/plugins/wp-d3/#developers
CVE ID: CVE-2016-10947 State: PUBLISHED Published: 2019-09-13T12:03:16 Last Updated: 2024-08-06T03:38:56.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/sql-injection-in-post-indexer-allows-super-admins-to-read-the-contents-of-the-database/
CVE ID: CVE-2016-10948 State: PUBLISHED Published: 2019-09-13T12:04:52 Last Updated: 2024-08-06T03:38:56.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/unserialisation-in-post-indexer-could-allow-man-in-the-middle-to-execute-arbitrary-code-in-some-circumstances/
CVE ID: CVE-2016-10949 State: PUBLISHED Published: 2019-09-13T12:06:12 Last Updated: 2024-08-06T03:38:56.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.dxw.com/advisories/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances/
CVE ID: CVE-2016-10950 State: PUBLISHED Published: 2019-09-13T12:08:37 Last Updated: 2024-08-06T03:38:56.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8673 - https://wordpress.org/plugins/sirv/#developers - http://lenonleite.com.br/en/2016/11/10/sirv-1-3-1-plugin-for-wordpress/
CVE ID: CVE-2016-10951 State: PUBLISHED Published: 2019-09-13T12:10:13 Last Updated: 2024-08-06T03:38:56.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8672 - https://wordpress.org/plugins/fs-shopping-cart/#developers - http://lenonleite.com.br/en/2016/11/10/firestorm-shopping-cart-ecommerce-plugin-2-07-02-for-wordpress/
CVE ID: CVE-2016-10952 State: PUBLISHED Published: 2019-09-13T12:13:07 Last Updated: 2024-08-06T03:38:56.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8649 - https://wordpress.org/plugins/quotes-collection/#developers - https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_quotes_collection_wordpress_plugin.html
CVE ID: CVE-2016-10953 State: PUBLISHED Published: 2019-09-13T12:14:25 Last Updated: 2024-08-06T03:38:56.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Headway theme before 3.8.9 for WordPress has XSS via the license key field. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8641 - https://wptavern.com/headway-3-8-9-patches-potential-xss-vulnerability
CVE ID: CVE-2016-10954 State: PUBLISHED Published: 2019-09-13T12:16:26 Last Updated: 2024-08-06T03:38:56.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8622 - https://lifeforms.nl/20160919/unrestricted-upload-neosense
CVE ID: CVE-2016-10955 State: PUBLISHED Published: 2019-09-13T12:17:30 Last Updated: 2024-08-06T03:38:56.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8612 - https://wordpress.org/plugins/cysteme-finder/#developers
CVE ID: CVE-2016-10956 State: PUBLISHED Published: 2019-09-16T11:20:29 Last Updated: 2024-08-06T03:38:56.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8609 - https://wordpress.org/plugins/mail-masta/#developers - https://cxsecurity.com/issue/WLB-2016080220
CVE ID: CVE-2016-10957 State: PUBLISHED Published: 2019-09-16T12:06:10 Last Updated: 2024-08-06T03:38:56.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8607 - https://www.saotn.org/wordpress-advisory-akal-theme-xss-vulnerability/
CVE ID: CVE-2016-10958 State: PUBLISHED Published: 2019-09-16T12:07:47 Last Updated: 2024-08-06T03:38:56.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/estatik/#developers - https://estatik.net/estatik-released-security-updates/ - https://www.pluginvulnerabilities.com/2016/08/01/arbitrary-file-upload-vulnerability-in-estatik/
CVE ID: CVE-2016-10959 State: PUBLISHED Published: 2019-09-16T12:08:53 Last Updated: 2024-08-06T03:47:32.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/estatik/#developers - https://www.pluginvulnerabilities.com/2016/08/19/authenticated-arbitrary-file-upload-vulnerability-in-estatik/
CVE ID: CVE-2016-10960 State: PUBLISHED Published: 2019-09-16T12:22:15 Last Updated: 2024-08-06T03:47:32.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wsecure/#developers - https://www.pluginvulnerabilities.com/2016/07/12/remote-code-execution-rce-vulnerability-in-wsecure-lite/
CVE ID: CVE-2016-10961 State: PUBLISHED Published: 2019-09-16T12:23:41 Last Updated: 2024-08-06T03:47:32.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8568 - https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_colorway_wordpress_theme.html
CVE ID: CVE-2016-10962 State: PUBLISHED Published: 2019-09-16T12:25:00 Last Updated: 2024-08-06T03:47:33.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/icegram/#developers - https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_icegram_wordpress_plugin.html
CVE ID: CVE-2016-10963 State: PUBLISHED Published: 2019-09-16T12:26:31 Last Updated: 2024-08-06T03:47:32.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The icegram plugin before 1.9.19 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/icegram/#developers
CVE ID: CVE-2016-10964 State: PUBLISHED Published: 2019-09-16T12:27:45 Last Updated: 2024-08-06T03:47:33.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/dwnldr/#developers - https://rastating.github.io/dwnldr-1-0-stored-xss-disclosure/
CVE ID: CVE-2016-10965 State: PUBLISHED Published: 2019-09-16T12:30:45 Last Updated: 2024-08-06T03:47:32.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/real3d-flipbook-lite/#developers - https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/
CVE ID: CVE-2016-10966 State: PUBLISHED Published: 2019-09-16T12:33:08 Last Updated: 2024-08-06T03:47:33.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/real3d-flipbook-lite/#developers - https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/
CVE ID: CVE-2016-10967 State: PUBLISHED Published: 2019-09-16T12:34:00 Last Updated: 2024-08-06T03:47:33.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/real3d-flipbook-lite/#developers - https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/
CVE ID: CVE-2016-10968 State: PUBLISHED Published: 2019-09-16T12:35:22 Last Updated: 2024-08-06T03:47:33.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/peepso-core/#developers - http://www.pritect.net/blog/peepso-1-6-0-logged-user-privilege-escalation
CVE ID: CVE-2016-10969 State: PUBLISHED Published: 2019-09-16T12:37:02 Last Updated: 2024-08-06T03:47:33.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/supportflow/#developers - https://github.com/SupportFlow/supportflow/commit/c08d376072f093b650c49dcb44124f43ea0177b1
CVE ID: CVE-2016-10970 State: PUBLISHED Published: 2019-09-16T12:38:19 Last Updated: 2024-08-06T03:47:32.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/supportflow/#developers - https://github.com/SupportFlow/supportflow/commit/c507cc863d161f87c28d0682714bf188ffac1a67
CVE ID: CVE-2016-10971 State: PUBLISHED Published: 2019-09-16T12:39:25 Last Updated: 2024-08-06T03:47:33.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required. Additional Analyst Notes: - CVE Program Container: References: - http://www.pritect.net/blog/membersonic-lite-1-2-unauthenticated-login
CVE ID: CVE-2016-10972 State: PUBLISHED Published: 2019-09-16T16:40:00 Last Updated: 2024-08-06T03:47:33.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8852 - https://www.exploit-db.com/exploits/39894
CVE ID: CVE-2016-10973 State: PUBLISHED Published: 2019-09-16T16:41:38 Last Updated: 2024-08-06T03:47:33.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8614 - https://www.openwall.com/lists/oss-security/2016/05/20/5
CVE ID: CVE-2016-10974 State: PUBLISHED Published: 2019-09-17T14:02:30 Last Updated: 2024-08-06T03:47:32.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/fluid-responsive-slideshow/#developers - https://klikki.fi/adv/fluid_responsive_slideshow.html
CVE ID: CVE-2016-10975 State: PUBLISHED Published: 2019-09-17T14:03:37 Last Updated: 2024-08-06T03:47:33.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/fluid-responsive-slideshow/#developers - https://klikki.fi/adv/fluid_responsive_slideshow.html
CVE ID: CVE-2016-10976 State: PUBLISHED Published: 2019-09-17T14:05:33 Last Updated: 2024-08-06T03:47:34.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8497 - https://wordpress.org/plugins/safe-editor/#developers
CVE ID: CVE-2016-10977 State: PUBLISHED Published: 2019-09-17T14:06:33 Last Updated: 2024-08-06T03:47:33.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8491 - https://wordpress.org/plugins/nelio-ab-testing/#developers - https://www.openwall.com/lists/oss-security/2016/05/10/1
CVE ID: CVE-2016-10978 State: PUBLISHED Published: 2019-09-17T14:08:17 Last Updated: 2024-08-06T03:47:33.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8486 - https://wordpress.org/plugins/fossura-tag-miner/#developers
CVE ID: CVE-2016-10979 State: PUBLISHED Published: 2019-09-17T14:09:54 Last Updated: 2024-08-06T03:47:33.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/fossura-tag-miner/#developers
CVE ID: CVE-2016-10980 State: PUBLISHED Published: 2019-09-17T14:14:45 Last Updated: 2024-08-06T03:47:33.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/kento-post-view-counter/#developers - https://www.openwall.com/lists/oss-security/2016/04/16/2
CVE ID: CVE-2016-10981 State: PUBLISHED Published: 2019-09-17T14:15:21 Last Updated: 2024-08-06T03:47:33.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/kento-post-view-counter/#developers - https://www.openwall.com/lists/oss-security/2016/04/16/3
CVE ID: CVE-2016-10982 State: PUBLISHED Published: 2019-09-17T14:17:06 Last Updated: 2024-08-06T03:47:33.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/kento-post-view-counter/#developers - https://www.openwall.com/lists/oss-security/2016/04/16/3
CVE ID: CVE-2016-10983 State: PUBLISHED Published: 2019-09-17T14:21:20 Last Updated: 2024-08-06T03:47:33.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ghost/#developers - https://packetstormsecurity.com/files/136887/
CVE ID: CVE-2016-10984 State: PUBLISHED Published: 2019-09-17T14:22:43 Last Updated: 2024-08-06T03:47:33.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8465 - https://wordpress.org/plugins/echosign/#developers - https://0x62626262.wordpress.com/2016/04/21/echosign-plugin-for-wordpress-xss-vulnerability/
CVE ID: CVE-2016-10985 State: PUBLISHED Published: 2019-09-17T14:24:50 Last Updated: 2024-08-06T03:47:33.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8465 - https://wordpress.org/plugins/echosign/#developers - https://0x62626262.wordpress.com/2016/04/21/echosign-plugin-for-wordpress-xss-vulnerability/
CVE ID: CVE-2016-10986 State: PUBLISHED Published: 2019-09-17T14:26:11 Last Updated: 2024-08-06T03:47:33.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8464 - https://wordpress.org/plugins/tweet-wheel/#developers - https://0x62626262.wordpress.com/2016/04/21/tweet-wheel-xss-vulnerability/
CVE ID: CVE-2016-10987 State: PUBLISHED Published: 2019-09-17T14:27:15 Last Updated: 2024-08-06T03:47:33.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8463 - https://wordpress.org/plugins/persian-woocommerce-sms/#developers - https://0x62626262.wordpress.com/2016/04/21/persian-woocommerce-sms-xss-vulnerability/
CVE ID: CVE-2016-10988 State: PUBLISHED Published: 2019-09-17T14:28:26 Last Updated: 2024-08-06T03:47:33.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8457 - https://wordpress.org/plugins/leenkme/#developers - https://www.openwall.com/lists/oss-security/2016/04/16/4