WordPress Plugin Vulnerabilities

Lazyest Gallery <= 1.1.20 - EXIF Script Insertion

Description

The Lazyest Gallery WordPress plugin was affected by an EXIF Script Insertion security vulnerability.

Affects Plugins

Plugin icon
lazyest-gallery
Fixed in 1.1.21

References

CVE
CVE-2014-2333

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
7530e482-f6f6-4a1c-abfa-799a41a49ec8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-02-06
Title
PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) < 2.7.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-03-23
Title
Simple Event Planner < 1.5.5 - Contributor+ Stored XSS
Published
2025-04-22
Title
Textmetrics < 3.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2021-11-01
Title
My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site Scripting
Published
2021-11-15
Title
WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site Scripting