CVE-2024-5811

CVE-2024-5811 affects the WordPress plugin Simple Video Directory (before 1.4.4). The issue stems from insufficient sanitisation/escaping of certain plugin settings, enabling Stored XSS by contributors and higher, even when unfiltered_html is disallowed (e.g., multisite). Public details from Red ...

CVE-2024-6809

The CVE-2024-6809 entry maps to the WordPress Simple Video Directory plugin (versions prior to 1.4.3) where a SQL injection is caused by failing to properly sanitize and escape a parameter used in a SQL statement via an unauthenticated AJAX action. Affected component: plugin code handling the AJA...