Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: quantumcloud Component: Simple Video Directory Clear all filters
TI-2024-06312 CVE-2024-6809 · GHSA-93mr-fwrq-w2xg

Simple Video Directory < 1.4.3 - Unauthenticated SQLi

Priority HIGH 82

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL inject…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2025-05-15 Fixed in 1.4.3 CWE-89
TI-2024-05388 CVE-2024-5811 · GHSA-33q9-6qmp-35mw

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS

Priority MEDIUM 60

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00335 Published 2024-07-12 Fixed in 1.4.4 CWE-79