CVE-2016-10962

MEDIUM

icegram_engage < 1.9.19 - Cross-Site Request Forgery via wp-admin/edit.php option_name Parameter

Title source: llm

The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.

Core 2

Core References

Release Notes x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0061

EPSS Percentile 45.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

CWE-352

Status published

Products (1)

icegram/icegram_engage < 1.9.19

Published Sep 16, 2019

Tracked Since Feb 18, 2026