CVE-2024-3555

CVE-2024-3555 affects the WordPress plugin “Social Link Pages: link-in-bio landing pages for your social media profiles”. The root cause is a missing capability check in import_link_pages() across versions up to and including 1.6.9, enabling unauthenticated attackers to create arbitrary pages and...

CVE-2024-34002

Summary (CVE-2024-34002) In Moodle, in shared hosting environments misconfigured to expose other users’ content, a user with both access to restore feedback modules and direct access to the web server outside of Moodle’s webroot can trigger a local file include (LFI). Multiple connected sources (...