WordPress Plugin Vulnerabilities

Tera Charts 1.0 - Unauthenticated Cross-Site Scripting (XSS)

Description

The tera-charts WordPress plugin was affected by an Unauthenticated Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
tera-charts
No known fix

References

CVE
CVE-2016-1000151
URL
http://www.vapidlabs.com/wp/wp_advisory.php?v=455
URL
https://www.openwall.com/lists/oss-security/2016/05/11/12

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Original Researcher
Larry W. Cashdollar, @_larry0
Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
0dfb899f-f9a4-44f1-b6d5-de9966b7fb2d

Timeline

Publicly Published
2016-05-11 (about 10 years ago)
Added
2016-05-11 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-01-08
Title
Top Position Google Finance <= 0.1.0 - Reflected Cross-Site Scripting
Published
2014-10-30
Title
Profile Builder < 2.0.3 - Reflected Cross-Site Scripting (XSS)
Published
2025-04-10
Title
WP Maps < 4.7.2 - Admin+ Stored XSS
Published
2024-09-30
Title
Accordion & FAQ – Helpie WordPress Accordion FAQ Plugin < 1.28 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2026-01-12
Title
Accordion Slider PRO <= 1.2 - Reflected Cross-Site Scripting