rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-10895 
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T15:28:15.000Z
CVE-2016-10896 
The seo-redirection plugin before 4.3 for WordPress has stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T11:38:57.000Z
CVE-2016-10897 
The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T11:42:14.000Z
CVE-2016-10898 
The total-security plugin before 3.4.1 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T11:53:18.000Z
CVE-2016-10899 
The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T11:51:58.000Z
CVE-2016-10900 
The uji-countdown plugin before 2.0.7 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:39:15.000Z
CVE-2016-10901 
The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:42:33.000Z
CVE-2016-10902 
The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:45:25.000Z
CVE-2016-10903 
The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:47:12.000Z
CVE-2016-10904 
The olimometer plugin before 2.57 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T13:41:58.000Z
CVE-2016-10905 
An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T01:52:24.000Z
CVE-2016-10906 
An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arc_emac_tx and arc_emac_tx_clean.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T01:52:09.000Z
CVE-2016-10907 
An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755_parse_dt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-19T01:51:19.000Z
CVE-2016-10908 
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:40:47.000Z
CVE-2016-10909 
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T12:44:11.000Z
CVE-2016-10910 
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:47:52.000Z
CVE-2016-10911 
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:46:19.000Z
CVE-2016-10912 
The universal-analytics plugin before 1.3.1 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:18:23.000Z
CVE-2016-10913 
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:56:19.000Z
CVE-2016-10914 
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:55:36.000Z
CVE-2016-10915 
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:52:50.000Z
CVE-2016-10916 
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:11:21.000Z
CVE-2016-10917 
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:18:41.000Z
CVE-2016-10918 
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:23:13.000Z
CVE-2016-10919 
The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:24:39.000Z
CVE-2016-10920 
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:32:39.000Z
CVE-2016-10921 
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:33:51.000Z
CVE-2016-10922 
The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:00:56.000Z
CVE-2016-10923 
The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:02:09.000Z
CVE-2016-10924 
The ebook-download plugin before 1.2 for WordPress has directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:04:48.000Z
CVE-2016-10925 
The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:10:59.000Z
CVE-2016-10926 
The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:21:52.000Z
CVE-2016-10927 
The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:22:53.000Z
CVE-2016-10928 
The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:40:39.000Z
CVE-2016-10929 
The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:39:22.000Z
CVE-2016-10930 
The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T18:57:31.000Z
CVE-2016-10931 
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:00:16.000Z
CVE-2016-10932 
An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:01:57.000Z
CVE-2016-10933 
An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:03:36.000Z
CVE-2016-10934 
The check-email plugin before 0.5.2 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:48:33.000Z
CVE-2016-10935 
The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:59:00.000Z
CVE-2016-10936 
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:04:29.000Z
CVE-2016-10937 
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-08T15:07:10.000Z
CVE-2016-10938 
The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:46:28.000Z
CVE-2016-10939 
The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:47:37.000Z
CVE-2016-10940 
The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:49:11.000Z
CVE-2016-10941 
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:52:23.000Z
CVE-2016-10942 
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:53:42.000Z
CVE-2016-10943 
The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:55:38.000Z
CVE-2016-10944 
The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T11:57:15.000Z
CVE-2016-10945 
The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:00:10.000Z
CVE-2016-10946 
The wp-d3 plugin before 2.4.1 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:01:34.000Z
CVE-2016-10947 
The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:03:16.000Z
CVE-2016-10948 
The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:04:52.000Z
CVE-2016-10949 
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:06:12.000Z
CVE-2016-10950 
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:08:37.000Z
CVE-2016-10951 
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:10:13.000Z
CVE-2016-10952 
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:13:07.000Z
CVE-2016-10953 
The Headway theme before 3.8.9 for WordPress has XSS via the license key field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:14:25.000Z
CVE-2016-10954 
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:16:26.000Z
CVE-2016-10955 
The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-13T12:17:30.000Z
CVE-2016-10956 
The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T11:20:29.000Z
CVE-2016-10957 
The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:06:10.000Z
CVE-2016-10958 
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:07:47.000Z
CVE-2016-10959 
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:08:53.000Z
CVE-2016-10960 
The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:22:15.000Z
CVE-2016-10961 
The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:23:41.000Z
CVE-2016-10962 
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:25:00.000Z
CVE-2016-10963 
The icegram plugin before 1.9.19 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:26:31.000Z
CVE-2016-10964 
The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:27:45.000Z
CVE-2016-10965 
The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:30:45.000Z
CVE-2016-10966 
The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:33:08.000Z
CVE-2016-10967 
The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:34:00.000Z
CVE-2016-10968 
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:35:22.000Z
CVE-2016-10969 
The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:37:02.000Z
CVE-2016-10970 
The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:38:19.000Z
CVE-2016-10971 
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T12:39:25.000Z
CVE-2016-10972 
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:40:00.000Z
CVE-2016-10973 
The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:41:38.000Z
CVE-2016-10974 
The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:02:30.000Z
CVE-2016-10975 
The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:03:37.000Z
CVE-2016-10976 
The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:05:33.000Z
CVE-2016-10977 
The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:06:33.000Z
CVE-2016-10978 
The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:08:17.000Z
CVE-2016-10979 
The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:09:54.000Z
CVE-2016-10980 
The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:14:45.000Z
CVE-2016-10981 
The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:15:21.000Z
CVE-2016-10982 
The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:17:06.000Z
CVE-2016-10983 
The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:21:20.000Z
CVE-2016-10984 
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:22:43.000Z
CVE-2016-10985 
The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:24:50.000Z
CVE-2016-10986 
The tweet-wheel plugin before 1.0.3.3 for WordPress has XSS via consumer_key, consumer_secret, access_token, and access_token_secret.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:26:11.000Z
CVE-2016-10987 
The persian-woocommerce-sms plugin before 3.3.4 for WordPress has ps_sms_numbers XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:27:15.000Z
CVE-2016-10988 
The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:28:26.000Z
CVE-2016-10989 
The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkme_facebook CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:29:07.000Z
CVE-2016-10990 
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:30:32.000Z
CVE-2016-10991 
The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:31:30.000Z
CVE-2016-10992 
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:36:04.000Z
CVE-2016-10993 
The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-17T14:37:37.000Z
CVE-2016-10994 
The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T11:07:55.000Z
CVE-2016-10995 
The Tevolution plugin before 2.3.0 for WordPress has arbitrary file upload via single_upload.php or single-upload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-18T11:05:38.000Z
CVE-2016-10996 
The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:07:07.000Z
CVE-2016-10997 
The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:08:52.000Z
CVE-2016-10998 
The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:29:55.000Z
CVE-2016-10999 
The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:31:42.000Z