Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wp-publications Project Component: Wp-publications Clear all filters
TI-2024-10752 CVE-2024-11605 · GHSA-m7pm-65hr-r8px

WP Publications <= 1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01236 Published 2024-12-27 No fix listed CWE-79
TI-2021-15967 CVE-2021-38360 · GHSA-m98h-48v7-g4f9

wp-publications <= 0.0 Local File Include

Priority MEDIUM 52

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which allows attackers to include local zip files and achieve remote c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0226 Published 2021-09-10 No fix listed CWE-22