CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2

• CWE-79

• http://www.securityfocus.com/bid/93820Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=533Exploit, Third Party Advisory
• https://wordpress.org/plugins/hdw-tubeNot Applicable
• http://www.securityfocus.com/bid/93820Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=533Exploit, Third Party Advisory
• https://wordpress.org/plugins/hdw-tubeNot Applicable

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000129Reflected XSS in wordpress plugin defa-online-image-protecto…
• CVE-2016-1000130Reflected XSS in wordpress plugin e-search v1.0
• CVE-2016-1000131Reflected XSS in wordpress plugin e-search v1.0
• CVE-2016-1000132Reflected XSS in wordpress plugin enhanced-tooltipglossary v…
• CVE-2016-1000133Reflected XSS in wordpress plugin forget-about-shortcode-but…
• CVE-2016-1000134Reflected XSS in wordpress plugin hdw-tube v1.2
• CVE-2016-1000136Reflected XSS in wordpress plugin heat-trackr v1.0
• CVE-2016-1000137Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
• CVE-2016-1000138Reflected XSS in wordpress plugin indexisto v1.0.5
• CVE-2016-1000139Reflected XSS in wordpress plugin infusionsoft v1.5.11
• CVE-2016-1000140Reflected XSS in wordpress plugin new-year-firework v1.1.9
• CVE-2016-1000141Reflected XSS in wordpress plugin page-layout-builder v1.9.3