WordPress Plugin Vulnerabilities

DZS Video Gallery Plugin - RCE & More

Description

The dzs-videogallery WordPress plugin was affected by a RCE & More security vulnerability.

Affects Plugins

Plugin icon
dzs-videogallery
Fixed in 7.95

References

CVE
CVE-2014-9094
URL
https://seclists.org/fulldisclosure/2014/May/157
URL
https://seclists.org/fulldisclosure/2014/Jul/65

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
12c37d47-f98e-4ef0-9417-bf784e6b48ad

Timeline

Publicly Published
2014-09-27 (about 9 years ago)
Added
2014-09-27 (about 9 years ago)
Last Updated
2021-12-08 (about 2 years ago)

Other

Published
Title
Published
2015-02-26
Title
WP All Import Pro <= 4.1.0 - RCE
Published
2016-04-12
Title
Robo Gallery <= 2.0.14 - Remote Code Execution
Published
2014-08-01
Title
MailPoet Newsletters 2.6.6 - Theme File Upload H&ling Remote Code Execution
Published
2019-07-15
Title
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
Published
2022-02-08
Title
PHP Everywhere < 3.0.0 - Contributor+ RCE via Metabox