CVE-2015-9385

The CVE-2015-9385 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Quotes and Tips, version

CVE-2024-3112

The CVE-2024-3112 entry concerns the Quotes and Tips by BestWebSoft WordPress plugin (pre-1.45). The vulnerability arises from improper validation of uploaded image files, enabling high-privilege users (e.g., administrators) to upload arbitrary files to the server, including in multisite configur...