Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-6896

47
FAUCET Score

CVE-2016-6896 describes a directory traversal vulnerability in WordPress 4.5.3, specifically within the wp_ajax_update_plugin function. This flaw allows remote authenticated users to exploit a "dot dot" sequence in the plugin parameter to either read certain text files or trigger a denial of service by depleting the entropy pool through operations like reading from /dev/random. With a CVSS score of 7.1 (HIGH), the vulnerability is easily exploitable over the network with low privileges and no user interaction, potentially leading to high availability impact and limited confidentiality compromise. While not listed in CISA's KEV catalog and lacking widespread community discussion or media coverage, public exploit code (EDB-40288) is available, indicating its potential for exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
4.5.3CPE matchmatch criteria
cpe:2.3:a:wordpress:wordpress:4.5.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.1HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
4.2
CvssVersion
3.0

Exploit Intelligence

EPSS Score
38.45%
Probability of exploitation in next 30 days
EPSS Percentile
98.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
ExploitDB: EDB-40288 · Aug 22, 2016
This CVE's current EPSS score of 0.3845 is in the 98th percentile among its peer group of 17,823 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

sumofpwn.nl / advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html
ExploitTechnical DescriptionThird Party Advisory
wpvulndb.com / vulnerabilities/8606
exploit-db.com / exploits/40288
openwall.com / lists/oss-security/2016/08/20/1
Mailing ListThird Party Advisory
securitytracker.com / id/1036683