Security Advisory
CVE-2016-10996
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.