CVE-2016-10898

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The total-security plugin before 3.4.1 for WordPress has XSS.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-108995.3The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.CVE-2016-10907.8Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, aCVE-2016-109006.1The uji-countdown plugin before 2.0.7 for WordPress has XSS.CVE-2016-109016.1The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.CVE-2016-109028.8The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.CVE-2016-109038.8The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.CVE-2016-109049.8The olimometer plugin before 2.57 for WordPress has SQL injection.CVE-2016-109057.8An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and rCVE-2016-109067.0An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race conditiCVE-2016-109077.8An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755CVE-2016-109086.1The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.CVE-2016-109099.8The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.