CVE-2021-38360

The CVE-2021-38360 entry concerns the WordPress plugin wp-publications (versions

wp-publications - Local File Inclusion

The plugin is vulnerable to restrictive local file inclusion via the QFILE parameter found in the /bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution...