CVE-2016-1000129

Reflected XSS in wordpress plugin defa-online-image-protector v3.3

• CWE-79

• http://www.securityfocus.com/bid/93892
• http://www.vapidlabs.com/wp/wp_advisory.php?v=449Exploit, Third Party Advisory
• https://wordpress.org/plugins/defa-online-image-protectorNot Applicable
• http://www.securityfocus.com/bid/93892
• http://www.vapidlabs.com/wp/wp_advisory.php?v=449Exploit, Third Party Advisory
• https://wordpress.org/plugins/defa-online-image-protectorNot Applicable

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000123Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.…
• CVE-2016-1000124Unauthenticated SQL Injection in Huge-IT Portfolio Gallery P…
• CVE-2016-1000125Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for …
• CVE-2016-1000126Reflected XSS in wordpress plugin admin-font-editor v1.8
• CVE-2016-1000127Reflected XSS in wordpress plugin ajax-random-post v2.00
• CVE-2016-1000128Reflected XSS in wordpress plugin anti-plagiarism v3.60
• CVE-2016-1000130Reflected XSS in wordpress plugin e-search v1.0
• CVE-2016-1000131Reflected XSS in wordpress plugin e-search v1.0
• CVE-2016-1000132Reflected XSS in wordpress plugin enhanced-tooltipglossary v…
• CVE-2016-1000133Reflected XSS in wordpress plugin forget-about-shortcode-but…
• CVE-2016-1000134Reflected XSS in wordpress plugin hdw-tube v1.2
• CVE-2016-1000135Reflected XSS in wordpress plugin hdw-tube v1.2