S4E just found a critical-severity finding from cve-2026-109618 php2shell scanner (version based)
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2016-1000140

6.1
CVSS
Description

Reflected XSS in wordpress plugin new-year-firework v1.1.9

Attack Vector
-
Privileges Req.
-
User Interaction
-
Updated Oct 12, 2026View on NVD →
S4E scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →