WordPress Plugin Vulnerabilities

Photo Gallery <= 1.2.5 - Unrestricted File Upload

Description

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability.

Affects Plugins

Plugin icon
photo-gallery
Fixed in 1.2.6

References

CVE
CVE-2014-9312
URL
https://security.szurek.pl/photo-gallery-125-unrestricted-file-upload.html

Miscellaneous

Submitter
Kacper Szurek
Submitter website
http://security.szurek.pl
Submitter twitter
kacperszurek
Verified
Yes
WPVDB ID
c2b4aec5-1f23-443e-a0fc-1237778893e1

Timeline

Publicly Published
2015-02-12 (about 11 years ago)
Added
2015-01-27 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-12-04
Title
PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Published
2022-04-19
Title
AGIL <= 1.0 - Admin+ Arbitrary File Upload
Published
2014-08-01
Title
Reganto - Remote File Upload
Published
2025-10-29
Title
WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload