CVE-2016-10973

The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.

• CWE-79

• https://wpvulndb.com/vulnerabilities/8614Exploit, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2016/05/20/5Exploit, Mailing List, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/8614Exploit, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2016/05/20/5Exploit, Mailing List, Third Party Advisory

Published

Sep 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10968The peepso-core plugin before 1.6.1 for WordPress has PeepSo…8.8
• CVE-2016-10969The supportflow plugin before 0.7 for WordPress has XSS via …6.1
• CVE-2016-1097Unspecified vulnerability in Adobe Flash Player 21.0.0.213 a…
• CVE-2016-10970The supportflow plugin before 0.7 for WordPress has XSS via …6.1
• CVE-2016-10971The MemberSonic Lite plugin before 1.302 for WordPress has i…9.8
• CVE-2016-10972The newspaper theme before 6.7.2 for WordPress has a lack of…9.8
• CVE-2016-10974The fluid-responsive-slideshow plugin before 2.2.7 for WordP…8.8
• CVE-2016-10975The fluid-responsive-slideshow plugin before 2.2.7 for WordP…6.1
• CVE-2016-10976The safe-editor plugin before 1.2 for WordPress has no se_sa…6.1
• CVE-2016-10977The nelio-ab-testing plugin before 4.5.0 for WordPress has f…6.5
• CVE-2016-10978The fossura-tag-miner plugin before 1.1.5 for WordPress has …8.8
• CVE-2016-10979The fossura-tag-miner plugin before 1.1.5 for WordPress has …6.1