WordPress Plugin Vulnerabilities

GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access

Description

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by an admin/news.php want2Read Parameter Traversal Arbitrary File Access security vulnerability.

Affects Plugins

Plugin icon
flash-album-gallery
No known fix

References

Exploitdb
16947

Miscellaneous

Verified
No
WPVDB ID
b5c2a4c3-5911-432d-acd0-03445b4bdacb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
WordPress <= 2.8.5 - Unrestricted File Upload Arbitrary PHP Code Execution
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Site Options Modification
Published
2024-08-16
Title
ReviewX < 1.6.29 - Insufficient Rating Validation
Published
2025-02-03
Title
Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass
Published
2018-01-18
Title
Instagram Feed < 1.6 - Cross-Site Scripting (XSS)