CVE-2016-10964: findshorty dwnldr – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2016-10964

보통 6.1CVE-2016-10964 · Published 16/09/2019 · updated 17/06/2026

요약

CVE-2016-10964은(는) dwnldr (findshorty)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.0%, 전체 취약점의 63.6%보다 높음.
조치: 1.01 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
dwnldr findshorty	`< 1.01`	`1.01`

Description

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.

References

rastating.github.io/dwnldr-1-0-stored-xss-disclosure · Exploit
wordpress.org/plugins/dwnldr · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free