WordPress Plugin Vulnerabilities

DZS Video Gallery - upload.php File Upload Remote Code Execution

Description

The dzs-videogallery WordPress plugin was affected by an upload.php File Upload Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
dzs-videogallery
Fixed in 9.64

References

Exploitdb
29834

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
131e6799-4582-4c4c-ba6e-4c421d4dbf59

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-07-06 (about 5 years ago)

Other

Published
Title
Published
2026-01-18
Title
XStore < 9.6.5 - Unauthenticated Arbitrary Shortcode Execution
Published
2022-02-21
Title
WPCargo < 6.9.0 - Unauthenticated RCE
Published
2015-12-02
Title
Cool Video Gallery < 2.0 - Authenticated Command Injection
Published
2014-06-20
Title
Disqus <= 2.75 - Remote Code Execution (RCE)
Published
2024-03-12
Title
Anti-Malware Security and Brute-Force Firewall < 4.23.56 - Unauthenticated Remote Code Execution