CVE-2016-10996 (optinmonster)

The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.

View Full Alert

Related Posts

  • CVE-2016-10950

    The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter. View Full Alert

  • CVE-2016-10937

    IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate. View Full Alert

  • CVE-2016-10761

    Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. View Full Alert