WordPress Plugin Vulnerabilities

UnGallery <= 1.5.8 - Local File Disclosure

Description

The UnGallery WordPress plugin was affected by a Local File Disclosure security vulnerability.

Affects Plugins

Plugin icon
ungallery
Fixed in 1.5.9

References

Exploitdb
17704

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
8c0847aa-b9d5-40cb-b0de-c75947946df4

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-06-06
Title
SC filechecker <= 0.6 - Authenticated (Admin+) Arbitrary File Deletion
Published
2025-07-23
Title
hiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File Deletion
Published
2024-05-13
Title
JCH Optimize < 4.2.1 - Authenticated (Subscriber+) Directory Traversal
Published
2026-06-05
Title
WP User Manager < 2.9.18 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter
Published
2026-02-17
Title
WP-DownloadManager < 1.69.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter