CVE-2016-10964: Findshorty Dwnldr

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.

Affected products

• Findshorty Dwnldr: before 1.01 (fixed in 1.01)

Published 2019-09-16. Last modified 2026-06-17.