10 matches found
CVE-2026-16562
The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data...
CVE-2019-16562
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...
MSC-2023-16562
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
VulnCheck KEV: CVE-2017-16562
The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain administrative access via a "true" value for the upautolog parameter in the QUERYSTRING to the default URI...
CVE-2019-16562
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions...
CVE-2018-16562
The CVE-2018-16562 entry is rejected/not used and does not represent an active vulnerability.
WordPress Userpro Plugin Authentication Bypass (CVE-2017-16562)
An authentication bypass vulnerability exists in WordPress Userpro Plugin. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into the affected system...
Immunity Canvas: WPUSERPRO_RCE
Name| wpuserprorce ---|--- CVE| CVE-2017-16562 Exploit Pack| CANVAS Description| Wordpress Remote Command Execution Through UserPro Plugin login bypass Notes| References: https://www.exploit-db.com/exploits/43117/ Repeatability: Infinite VENDOR: UserPro Plugin CVE Url:...
CVE-2017-16562
The UserPro plugin for WordPress (versions prior to 4.9.17.1 ) is vulnerable to a remote authentication bypass . When a site uses the default "admin" username, a remote unauthenticated attacker can obtain administrative access by appending ?up_auto_log=true to the QUERY_STRING of the default URI....