Read the docs

Wp-publications Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp-publications Project records in CISA KEV

No Wp-publications Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-publications 2 records MEDIUM

Records

2 records in Wp-publications · all components

TI-2024-10752 CVE-2024-11605 · GHSA-m7pm-65hr-r8px

WP Publications <= 1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01236 Published 2024-12-27 No fix listed CWE-79
TI-2021-15967 CVE-2021-38360 · GHSA-m98h-48v7-g4f9

wp-publications <= 0.0 Local File Include

Priority MEDIUM 52

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which allows attackers to include local zip files and achieve remote c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0226 Published 2021-09-10 No fix listed CWE-22
Open these records in search →