CVE-2016-10958

HIGH · CVSS 7.5 EPSS 1.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-09-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-10958

Severity

HIGH

CVSS

7.5

EPSS

1.88%

WordPress

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.