Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-vzuu-b5fs-1yem
SummaryA vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1.6.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Aliases
0
alias CVE-2016-15004
Fixed_packages
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-15004
reference_id
reference_type
scores
0
value 0.01385
scoring_system epss
scoring_elements 0.80736
published_at 2026-06-11T12:55:00Z
1
value 0.01385
scoring_system epss
scoring_elements 0.80798
published_at 2026-06-14T12:55:00Z
2
value 0.01385
scoring_system epss
scoring_elements 0.80807
published_at 2026-06-13T12:55:00Z
3
value 0.01385
scoring_system epss
scoring_elements 0.80796
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-15004
1
reference_url http://seclists.org/fulldisclosure/2017/Jan/72
reference_id 72
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:54:24Z/
url http://seclists.org/fulldisclosure/2017/Jan/72
2
reference_url https://vuldb.com/?id.96073
reference_id ?id.96073
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:54:24Z/
url https://vuldb.com/?id.96073
3
reference_url https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html
reference_id infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-14T15:54:24Z/
url https://sumofpwn.nl/advisory/2016/infinitewp_client_wordpress_plugin_unauthenticated_php_object_injection_vulnerability.html
Weaknesses
0
cwe_id 74
name Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
description The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Exploits
Severity_range_score7.3 - 7.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-vzuu-b5fs-1yem