CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
2 CVEs tagged to vendor blog-in-blog_project — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
The Blog-in-Blog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blog_in_blog' shortcode in versions up to, and including, 2.0.0 due to insufficient inp…
The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.0 via a shortcode attribute. This allows editor-level, and above,…