CVE-2024-5811

CVE-2024-5811 affects the WordPress plugin Simple Video Directory (before 1.4.4). The issue stems from insufficient sanitisation/escaping of certain plugin settings, enabling Stored XSS by contributors and higher, even when unfiltered_html is disallowed (e.g., multisite). Public details from Red ...

CVE-2024-6809

The Simple Video Directory WordPress plugin in versions prior to 1.4.3 is vulnerable to an unauthenticated SQL injection . The root cause is the failure to properly sanitise and escape a parameter used within a SQL statement triggered by an AJAX action . An attacker can exploit this to execute ar...