CVE-2016-11006
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-11006
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress wp-invoice插件访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。wp-invoice是使用在其中的一个电子商务支付管理插件。 WordPress wp-invoice插件4.1.1之前版本中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-11006
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-11006
Please Login to view more intelligence information
- https://wpvulndb.com/vulnerabilities/8378x_refsource_MISC
- https://wordpress.org/plugins/wp-invoice/#developersx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2016-11006
Same Patch Batch · n/a · 2019-09-20 · 68 CVEs total
| CVE-2016-11007 | WordPress wp-invoice插件访问控制错误漏洞 | |
| CVE-2019-14915 | PRiSE adAS 跨站脚本漏洞 | |
| CVE-2019-14914 | PRiSE adAS 路径遍历漏洞 | |
| CVE-2019-14916 | PRiSE adAS 安全漏洞 | |
| CVE-2016-11000 | WordPress wp-ultimate-exporter插件SQL注入漏洞 | |
| CVE-2016-11001 | WordPress user-submitted-posts插件跨站脚本漏洞 | |
| CVE-2016-11003 | WordPress Elegant Themes Bloom插件安全漏洞 | |
| CVE-2016-11002 | WordPress Elegant Themes Extra theme 安全漏洞 | |
| CVE-2016-11004 | WordPress Elegant Themes Monarch插件安全漏洞 | |
| CVE-2016-11005 | WordPress instalinker插件跨站脚本漏洞 | |
| CVE-2019-16642 | TuziCMS SQL注入漏洞 | |
| CVE-2016-11008 | WordPress The wp-invoice插件访问控制错误漏洞 | |
| CVE-2016-11009 | WordPress wp-invoice插件访问控制错误漏洞 | |
| CVE-2016-11010 | WordPress wp-invoice插件访问控制错误漏洞 | |
| CVE-2016-11011 | WordPress wp-invoice插件安全漏洞 | |
| CVE-2016-11012 | WordPress sola-support-tickets插件跨站脚本漏洞 | |
| CVE-2016-11013 | WordPress wp-listings插件跨站脚本漏洞 | |
| CVE-2015-9384 | WordPress relevant插件跨站脚本漏洞 | |
| CVE-2015-9385 | WordPress quotes-and-tips插件跨站脚本漏洞 | |
| CVE-2015-9387 | WordPress mtouch-quiz插件跨站请求伪造漏洞 |
Showing top 20 of 68 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2016-11006
No comments yet