CVE-2024-12734

The Advance Post Prefix WordPress plugin (versions through 1.1.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape a parameter before outputting it back to the page. An attacker can exploit this by sending a crafted request to ...

CVE-2024-12735

The Advance Post Prefix WordPress plugin (versions 1.1.1 and earlier ) contains a SQL injection vulnerability. The root cause is the failure to properly sanitize and escape a parameter before including it in a SQL statement. This flaw allows users with admin privileges or higher to perform SQL in...