CVE

CVE-2016-10960

8.8

CVSS

Description

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 18, 2026View on NVD →

S4E scanner

CVE-2016-10960 Scanner

CVE-2016-10960 scanner - Remote Code Execution (RCE) vulnerability in Wsecure plugin for WordPress

Used 3.4k times · 2 assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.