Lucene search
K

21 matches found

Nuclei
Nuclei
added 2 days ago104 views

WordPress wSecure Lite < 2.4 - Remote Code Execution

WordPress wsecure plugin before 2.4 is susceptible to remote code execution via shell metacharacters in the wsecure-config.php publish parameter. id: CVE-2016-10960 info: name: WordPress wSecure Lite 2.4 - Remote Code Execution author: daffainfo severity: high description: WordPress wsecure plugi...

8.8CVSS7.9AI score0.71112EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 11:12 a.m.4 views

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

8.8CVSS8.1AI score0.71112EPSS
Exploits1References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/08 12:0 a.m.4 views

VulnCheck KEV: CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

8.8CVSS6.4AI score0.71112EPSS
In wildExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-43680

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00079EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:40 a.m.3 views

CVE-2023-39987

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

5.9CVSS5.6AI score0.00079EPSS
Exploits0
OSV
OSV
added 2023/09/04 11:15 a.m.0 views

CVE-2023-39987

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

4.8CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/09/04 11:15 a.m.7 views

CVE-2023-39987

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

5.9CVSS5.4AI score0.00079EPSS
Exploits0References1
Prion
Prion
added 2023/09/04 11:15 a.m.12 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

4.3CVSS4.8AI score0.00079EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/09/04 10:9 a.m.36 views

CVE-2023-39987

CVE-2023-39987 is an authenticated stored XSS in the WordPress wSecure Lite plugin (

5.9CVSS5.1AI score0.00079EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/04 10:9 a.m.12 views

CVE-2023-39987 WordPress wSecure Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

5.9CVSS5.6AI score0.00079EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/04 10:9 a.m.13 views

CVE-2023-39987 WordPress wSecure Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ajay Lulia wSecure Lite plugin = 2.5 versions...

5.9CVSS5.5AI score0.00079EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.1 views

PT-2023-27193 · Unknown · Wsecure Lite

Name of the Vulnerable Software and Affected Versions: Ajay Lulia wSecure Lite plugin versions = 2.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts into the...

5.9CVSS5.4AI score0.00079EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/09/04 12:0 a.m.0 views

WordPress plugin wsecure cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00079EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/08/09 12:0 a.m.7 views

WordPress wSecure Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

Software wSecure Lite Type Plugin Vulnerable versions = 2.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-39987 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 68d4c9f35275 Credits Rio Darmawan Required privileg...

5.9CVSS5.7AI score0.00079EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/09/16 1:15 p.m.8 views

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

8.8CVSS9.1AI score0.71112EPSS
Exploits1References2
OSV
OSV
added 2019/09/16 1:15 p.m.2 views

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

8.8CVSS6.3AI score0.71112EPSS
Exploits1References2
Prion
Prion
added 2019/09/16 1:15 p.m.6 views

Remote code execution

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

6.5CVSS8.3AI score0.71112EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/09/16 12:22 p.m.10 views

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

9.2AI score0.71112EPSS
Exploits1References2
CVE
CVE
added 2019/09/16 12:22 p.m.89 views

CVE-2016-10960

CVE-2016-10960 affects WordPress wSecure Lite plugin prior to version 2.4. The NUCLEI template confirms the flaw is a remote code execution vulnerability caused by shell metacharacters in the wsecure-config.php publish parameter, enabling an attacker to execute arbitrary code on the affected site...

8.8CVSS9.1AI score0.71112EPSS
In wildExploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/08/25 12:0 a.m.1 views

WordPress wSecure Lite Plugin Remote Command Execution

A remote code execution vulnerability exists in WordPress wSecure Lite Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.3AI score
Exploits0
Rows per page
Query Builder