CVE-2016-10899

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The total-security plugin before 3.4.1 for WordPress has a settings-change vulnerability.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Aug 21, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-10907.8Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, aCVE-2016-109006.1The uji-countdown plugin before 2.0.7 for WordPress has XSS.CVE-2016-109016.1The wp-customer-reviews plugin before 3.0.9 for WordPress has XSS in the admin tools.CVE-2016-109028.8The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.CVE-2016-109038.8The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.CVE-2016-109049.8The olimometer plugin before 2.57 for WordPress has SQL injection.CVE-2016-109057.8An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and rCVE-2016-109067.0An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5. A use-after-free is caused by a race conditiCVE-2016-109077.8An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755CVE-2016-109086.1The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.CVE-2016-109099.8The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.CVE-2016-10919.8Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acro
CVE-2016-10899: Medium severity, CVSS 5.3 | Vulnix