{"vulnerability": "CVE-2016-20101", "sightings": [{"uuid": "0dc6fbc3-0312-46e1-81c6-bb9afaedaae3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-20101", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fe04c871-2f76-4fb8-8da4-bc5f5f3edb3d", "content": "", "creation_timestamp": "2026-10-21T21:00:35.224645Z"}, {"uuid": "ceb3ca01-2b11-4fa2-b570-bcd934a17aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-20101", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117475196563946264", "content": "CVE-2016-20101 Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.\nhttps://www.cve.org/CVERecord?id=CVE-2016-20101https://packetstorm.news/files/id/136398/https://cxsecurity.com/issue/WLB-2016030131https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/issuu-panel-lfi.yamlhttps://wordpress.org/plugins/issuu-panel/https://www.vulncheck.com/advisories/issuu-panel-wordpress-plugin-1.6.6-file-inclusion-via-ajax-docs-php#wordpress #PedroMarcelo #IssuuPanel#CVE_2016_20101#bot", "creation_timestamp": "2026-10-20T20:47:25.170808Z"}]}