CVE-2024-5450

The Bug Library WordPress plugin (versions before 2.1.1 ) contains an unauthenticated Remote Code Execution (RCE) vulnerability. The root cause is a failure to perform file type validation on user-submitted bug reports, which allows an unauthenticated attacker to upload PHP files . Impacted by CW...

CVE-2024-5604

The Bug Library WordPress plugin versions prior to 2.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks, even in envir...

CVE-2021-38355

CVE-2021-38355 affects the WordPress Bug Library plugin up to version 2.0.3. The vulnerability is a reflected Cross-Site Scripting via the successimportcount parameter in ~/bug-library.php, enabling attackers to inject arbitrary web scripts. Exploitation details are not provided in the supplied d...