CVE-2024-54374

CVE-2024-54374 - Sogrid Local File Inclusion (LFI) Root cause: Unauthenticated Local File Inclusion in the Sogrid WordPress plugin (up to version 1.5.6), enabling an attacker to include server files via a restricted-path flaw (path traversal). Impact (as stated in sources): High-severity vulnerab...

CVE-2024-54352 WordPress Sogrid plugin <= 1.5.2 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sabri Sogrid sogrid allows Privilege Escalation.This issue affects Sogrid: from n/a through = 1.5.2...