CVE-2016-10972: Critical severity tagdiv newspaper vulnerability
Published Sep 16, 2019
·Updated
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel.
Affected Software
1 affected component
tagDiv Newspaper Wordpress<6.7.2
Event History
Sep 16, 2019
CVE Published
via MITRE·04:40 PM
Data Sourced
via MITRE·04:40 PM
Description
Frequently Asked Questions
1
What is CVE-2016-10972?
CVE-2016-10972 is a vulnerability in the newspaper theme for WordPress, allowing unauthorized access to options via td_ajax_update_panel.
2
What is the severity of CVE-2016-10972?
CVE-2016-10972 has a severity rating of 9.8 (Critical).
3
How does CVE-2016-10972 affect Tagdiv Newspaper theme?
CVE-2016-10972 affects versions of the Tagdiv Newspaper theme prior to 6.7.2.
4
How can I fix CVE-2016-10972?
To fix CVE-2016-10972, upgrade to version 6.7.2 or later of the Tagdiv Newspaper theme.
5
Where can I find more information about CVE-2016-10972?
You can find more information about CVE-2016-10972 at the following references: [WPVulnDB](https://wpvulndb.com/vulnerabilities/8852) and [Exploit-DB](https://www.exploit-db.com/exploits/39894).