WordPress Plugin Vulnerabilities

NextGEN Gallery < 2.1.15 - Unrestricted File Upload

Description

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability.

Affects Plugins

Plugin icon
nextgen-gallery
Fixed in 2.1.15

References

CVE
CVE-2015-9228
URL
https://packetstormsecurity.com/files/#135061/
URL
https://www.openwall.com/lists/oss-security/2015/10/27/6
URL
https://github.com/cybersecurityworks/Disclosed/issues/6

Miscellaneous

Verified
No
WPVDB ID
cfd60515-9953-4de5-a9dc-36d2583eb916

Timeline

Publicly Published
2015-12-23 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-05-14
Title
Copymatic – AI Content Writer & Generator < 1.7 - Unauthenticated Arbitrary File Upload
Published
2016-09-26
Title
W3 Total Cache < 0.9.5 – Authenticated Arbitrary File Upload
Published
2014-08-01
Title
Rent A Car 1.0 - Shell Upload
Published
2014-08-01
Title
Cms Pack 1.3 - Shell Upload
Published
2015-03-24
Title
InBoundio Marketing Plugin <= 2.0.3 - Shell Upload