Wp-publications Project ≫ Wp-publications

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

4.8

CVE-2024-11605

Exploit

EPSS 0.52%
Published 27.12.2024 06:15:22
Last modified 12.06.2025 17:03:14

The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capa...

9.8

CVE-2021-38360

EPSS 4.63%
Published 10.09.2021 14:15:11
Last modified 21.11.2024 06:16:54

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution, in versions up ...