WordPress Plugin Vulnerabilities

GRAND Flash Album Gallery 1.9.0 & 2.0.0 - Multiple Vulnerabilities

Description

The plugin was affected by Multiple Vulnerabilities security issues, such as file disclosure, file overwrite, directory traversal, and remote SQL injection

Affects Plugins

Plugin icon
flash-album-gallery
Fixed in 2.10

References

URL
https://packetstormsecurity.com/files/#117665/
URL
http://www.waraxe.us/advisory-94.html

Miscellaneous

Original Researcher
Janek Vind
Verified
Yes
WPVDB ID
c4a98555-9953-43ed-a982-d52a834c414a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2021-08-20 (about 4 years ago)

Other

Published
Title
Published
2014-12-15
Title
Sliding Social Icons <= 1.61 - CSRF & Stored XSS
Published
2014-08-01
Title
Mingle Forum <= 1.0.26 - Multiple Vulnerabilities
Published
2015-09-17
Title
WP Shop <= 3.4.3.18 - Cross-Site Scripting (XSS) & CSRF
Published
2017-05-08
Title
MSMC – Redirect After Comment - Unauthenticated XSS & CSRF
Published
2014-08-01
Title
Google Alert And Twitter 3.1.5 - XSS Exploit, SQL Injection