Description

The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.

Remediation

References

CVE-2016-5836

Related Vulnerabilities

Chart.js Improper Input Validation Vulnerability (CVE-2020-7746)

WordPress Plugin Mingle Forum Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.32.1)

IBM RTC Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2020-4547)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1000862)

WordPress Plugin WPUpper Share Buttons Cross-Site Scripting (3.42)

Severity

High

Classification

CVE-2016-5836 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities