CVE-2016-10883

The CVE-2016-10883 entry concerns the WordPress plugin simple-add-pages-or-posts (versions before 1.7). The connected documents confirm a CSRF vulnerability that allows deleting users, caused by insufficient verification of the request origin/trust. Impact is user deletion via CSRF; no explicit e...

CVE-2024-13850

CVE-2024-13850 refers to the WordPress plugin Simple Add Pages or Posts. Affected versions are all up to 2.0.0 and the vulnerability is Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. It requires authenticated attacker with administrator-level access; impac...