NVD CVE-2016-1000149 (simpel-reserveren) October 10, 2016 007admin Reflected XSS in wordpress plugin simpel-reserveren v3.5.2