CVE-2016-10955: Cysteme Cysteme-Finder

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking.

Affected products

• Cysteme Cysteme-Finder: before 1.4 (fixed in 1.4)

Published 2019-09-13. Last modified 2026-06-17.