CVE-2016-11000

The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter.

• CWE-89

• https://seclists.org/bugtraq/2016/Feb/183Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/wp-ultimate-exporter/#developersProduct, Third Party Advisory
• https://seclists.org/bugtraq/2016/Feb/183Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/wp-ultimate-exporter/#developersProduct, Third Party Advisory

Published

Sep 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10995The Tevolution plugin before 2.3.0 for WordPress has arbitra…9.8
• CVE-2016-10996The optinmonster plugin before 1.1.4.6 for WordPress has inc…5.3
• CVE-2016-10997The beauty-premium theme 1.0.8 for WordPress has CSRF with r…6.5
• CVE-2016-10998The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-…6.1
• CVE-2016-10999The Goodnews theme through 2016-02-28 for WordPress has XSS …6.1
• CVE-2016-1100Unspecified vulnerability in Adobe Flash Player 21.0.0.213 a…
• CVE-2016-11001The user-submitted-posts plugin before 20160215 for WordPres…6.1
• CVE-2016-11002The Elegant Themes Extra theme before 1.2.4 for WordPress ha…8.8
• CVE-2016-11003The Elegant Themes Bloom plugin before 1.1.1 for WordPress h…8.8
• CVE-2016-11004The Elegant Themes Monarch plugin before 1.2.7 for WordPress…8.8
• CVE-2016-11005The instalinker plugin before 1.1.2 for WordPress has includ…6.1
• CVE-2016-11006The wp-invoice plugin before 4.1.1 for WordPress has incorre…5.3