CVE-2024-5450

The Bug Library WordPress plugin, in versions prior to 2.1.1 , is vulnerable to Remote Code Execution (RCE) . The root cause is a failure to validate file types on user-submitted bug reports, which allows an unauthenticated user to upload PHP files . This vulnerability is classified under OWASP T...

CVE-2024-5604

The Bug Library WordPress plugin versions prior to 2.1.2 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators , to perform XSS attacks, even in env...