CVE-2012-2916

Published: May 21, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php.

Affected (22)

Products: Dlo: Simple Anti Bot Registration Engine Plugin

Dlo

1 product

Simple Anti Bot Registration Engine Plugin

Configuration A

22 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dlo Simple Anti Bot Registration Engine Plugin	Up to 1.2.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.1.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.2.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.2.2
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.4.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.4.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.4.2
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.6.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.6.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.6.2
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.6.3
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.7.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.7.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.7.2
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.7.3
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.7.4
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.8.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 0.9.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 1.0.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 1.1.0
Dlo Simple Anti Bot Registration Engine Plugin	Version 1.1.1
Dlo Simple Anti Bot Registration Engine Plugin	Version 1.1.2