CVE-2016-1000145

Reflected XSS in wordpress plugin pondol-carousel v1.0

• CWE-79

• http://www.securityfocus.com/bid/93586Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=524Exploit, Third Party Advisory
• https://wordpress.org/plugins/pondol-carouselNot Applicable
• http://www.securityfocus.com/bid/93586Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=524Exploit, Third Party Advisory
• https://wordpress.org/plugins/pondol-carouselNot Applicable

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000139Reflected XSS in wordpress plugin infusionsoft v1.5.11
• CVE-2016-1000140Reflected XSS in wordpress plugin new-year-firework v1.1.9
• CVE-2016-1000141Reflected XSS in wordpress plugin page-layout-builder v1.9.3
• CVE-2016-1000142Reflected XSS in wordpress plugin parsi-font v4.2.5
• CVE-2016-1000143Reflected XSS in wordpress plugin photoxhibit v2.1.8
• CVE-2016-1000144Reflected XSS in wordpress plugin photoxhibit v2.1.8
• CVE-2016-1000146Reflected XSS in wordpress plugin pondol-formmail v1.1
• CVE-2016-1000147Reflected XSS in wordpress plugin recipes-writer v1.0.4
• CVE-2016-1000148Reflected XSS in wordpress plugin s3-video v0.983
• CVE-2016-1000149Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
• CVE-2016-1000150Reflected XSS in wordpress plugin simplified-content v1.0.0
• CVE-2016-1000151Reflected XSS in wordpress plugin tera-charts v1.0