{"id":"CVE-2016-5836","details":"The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.","modified":"2026-08-18T08:25:52.958148Z","published":"2016-06-29T14:10:07.943Z","references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/91363"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00046.html"},{"type":"WEB","url":"https://wpvulndb.com/vulnerabilities/8523"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1036163"},{"type":"FIX","url":"https://codex.wordpress.org/Version_4.5.3"},{"type":"FIX","url":"https://wordpress.org/news/2016/06/wordpress-4-5-3/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wordpress/wordpress","events":[{"introduced":"0"},{"last_affected":"d11bf53a9998cf8ba267c983074c1eb8f3f91dcb"}],"database_specific":{"cpe":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"4.5.2"}],"source":"CPE_RANGE"}}],"versions":["4.5.2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5836.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/wordpress/wordpress-develop","events":[{"introduced":"0"},{"last_affected":"ce3a851b75dbe6d7a3c41ebf2b9c3d6f457c624d"}],"database_specific":{"cpe":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"4.5.2"}],"source":"CPE_RANGE"}}],"versions":["4.5.2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-5836.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}