WordPress Plugin Vulnerabilities

Gallery - "load" Remote File Inclusion

Description

The wordpress-gallery WordPress plugin was affected by a "load" Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
wordpress-gallery
No known fix

References

CVE
CVE-2012-4919

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
709b57c6-7fca-496d-9660-b8357f448ee4

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-03-02
Title
Global Logistics <= 3.20 - Unauthenticated Local File Inclusion
Published
2025-04-21
Title
Checkout Field Visibility for WooCommerce < 1.4.0 - Unauthenticated Local File Inclusion
Published
2026-01-23
Title
Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute
Published
2024-05-07
Title
Stockholm < 9.7 - Authenticated (Contributor+) Local File Inclusion
Published
2025-12-12
Title
Jobmonster < 4.8.3 - Authenticated (Contributor+) Local File Inclusion