CVE-2016-1000155

Reflected XSS in wordpress plugin wpsolr-search-engine v7.6

• CWE-79

• http://www.securityfocus.com/bid/93536Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=303Exploit, Third Party Advisory
• https://wordpress.org/plugins/wpsolr-search-engineProduct
• http://www.securityfocus.com/bid/93536Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/wp/wp_advisory.php?v=303Exploit, Third Party Advisory
• https://wordpress.org/plugins/wpsolr-search-engineProduct

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000149Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
• CVE-2016-1000150Reflected XSS in wordpress plugin simplified-content v1.0.0
• CVE-2016-1000151Reflected XSS in wordpress plugin tera-charts v1.0
• CVE-2016-1000152Reflected XSS in wordpress plugin tidio-form v1.0
• CVE-2016-1000153Reflected XSS in wordpress plugin tidio-gallery v1.1
• CVE-2016-1000154Reflected XSS in wordpress plugin whizz v1.0.7
• CVE-2016-1000156Mailcwp remote file upload vulnerability incomplete fix v1.1…
• CVE-2016-10002Incorrect processing of responses to If-None-Modified HTTP c…
• CVE-2016-1000213Ruckus Wireless H500 web management interface CSRF
• CVE-2016-1000214Ruckus Wireless H500 web management interface authentication…
• CVE-2016-1000215Ruckus Wireless H500 web management interface denial of serv…
• CVE-2016-1000216Ruckus Wireless H500 web management interface authenticated …