WordPress Plugin Vulnerabilities

Gallery 3.06 - Unauthenticated File Upload PHP Code Execution

Description

The Gallery by BestWebSoft WordPress plugin was affected by an Unauthenticated File Upload PHP Code Execution security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
gallery-plugin
Fixed in 3.1.1

References

Exploitdb
18998

Miscellaneous

Original Researcher
Sammy FORGIT
Verified
No
WPVDB ID
049c8518-1f52-4aa4-b0b3-218289727353

Timeline

Publicly Published
2012-06-01 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-02-27 (about 5 years ago)

Other

Published
Title
Published
2024-10-30
Title
Helloprint < 2.0.5 - Unauthenticated Arbitrary File Upload
Published
2024-11-13
Title
Push Notifications for WordPress by PushAssist <= 3.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2024-08-16
Title
Metform Elementor Contact Form Builder < 3.3.0 - Unauthenticated Double-Extension Arbitrary File Upload
Published
2023-09-04
Title
Export Import Menus < 1.9.0 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2017-04-20
Title
WooCommerce Catalog Enquiry - Arbitrary File Upload