← Database

CVE-2021-38360

HIGH CVSS: 8.3 Published: 2021-09-10 Modified: 2026-06-17

Description

The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which allows attackers to include local zip files and achieve remote code execution, in versions up to and including 0.0.

Affected Platforms

Wp-Publications Project Wp-Publications

Weakness Type

CWE-22, CWE-829

References