WordPress Plugin Vulnerabilities

File Gallery 1.7.9 - Settings Page create_function Function Remote Comm& Execution

Description

The File Gallery WordPress plugin was affected by a Settings Page create_function Function Remote Comm& Execution security vulnerability.

Affects Plugins

Plugin icon
file-gallery
Fixed in 1.7.9.2

References

CVE
CVE-2014-2558

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
43cb3d1a-9fb0-47c4-b28c-c39b4aae18bb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2019-07-15
Title
Ad Inserter <= 2.4.21 - Authenticated Remote Code Execution
Published
2025-09-22
Title
Cozy Blocks < 2.1.30 - Unauthenticated Arbitrary Shortcode Execution
Published
2025-08-02
Title
Molla <= 1.5.13 - Unauthenticated Remote Code Execution
Published
2022-06-28
Title
Import any XML or CSV File to WordPress < 3.6.8 - Admin+ Arbitrary Code Execution
Published
2024-02-26
Title
Slivery Extender <= 1.0.2 - Authenticated(Contributor+) Remote Code Execution via shortcode