GCVE - cpe:2.3:a:post_indexer_project:post_indexer:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:post_indexer_project:post_indexer:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Post Indexer Project (`ffab39a2-61e0-5698-a4a4-dfd30e68077d`)
Product	Post Indexer (`49bbe217-610a-5cc6-8a8d-b87f1d77a6a5`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-10948`	vulnerable	2026-06-08 05:07:25.884559	Details available The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function. Published: 2019-09-13T12:04:52.000Z Updated: 2024-08-06T03:38:56.823Z Open on db.gcve.eu Reference links https://advisories.dxw.com/advisories/unserialisation-in-post-indexer-could-allow-man-in-the-middle-to-execute-arbitrary-code-in-some-circumstances/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10947`	vulnerable	2026-06-08 05:07:25.884193	Details available The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin. Published: 2019-09-13T12:03:16.000Z Updated: 2024-08-06T03:38:56.847Z Open on db.gcve.eu Reference links https://advisories.dxw.com/advisories/sql-injection-in-post-indexer-allows-super-admins-to-read-the-contents-of-the-database/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.