Lucene search
+L

5 matches found

Nuclei
Nuclei
•added 2026/10/20 2:05 a.m.•52 views

WordPress API Bearer Auth <20190907 - Cross-Site Scripting

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. id: CVE-2019-16332 info: name: WordPress API Bearer Auth 20190907 - Cross-Site Scripting author: daffainfo severity: medium...

6.1CVSS6.1AI score0.05672EPSS
SaveExploits3References5
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

WordPress API Bearer Auth <20190907 - Cross-Site Scripting Detection

WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting...

6.1CVSS6.1AI score0.05672EPSS
SaveExploits3References6
NVD
NVD
•added 2019/09/15 10:15 p.m.•29 views

CVE-2019-16332

In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS...

6.1CVSS6.2AI score0.05672EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2019/09/15 12:00 a.m.•10 views

PT-2019-14631

Name of the Vulnerable Software and Affected Versions api-bearer-auth plugin for WordPress versions prior to 20190907 Description The issue concerns the api-bearer-auth plugin for WordPress, where the server parameter in the swagger-config.yaml.php file is not correctly filtered. This allows for...

6.1CVSS0.05672EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/15 12:00 a.m.•12 views

CVE-2019-16332: Improper Neutralization of Input During Web Page Generation

In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS...

6.1CVSS6.4AI score0.05672EPSS
SaveExploits3References2
Rows per page
Query Builder