WordPress Plugin Vulnerabilities

InPost Gallery <= 2.1.2 - LFI & Authenticated Stored XSS

Description

The InPost Gallery WordPress plugin was affected by a LFI & Authenticated Stored XSS security vulnerability.

Affects Plugins

Plugin icon
inpost-gallery
Fixed in 2.1.2.1

References

Miscellaneous

Verified
No
WPVDB ID
dc042d6d-39a3-435d-9b90-5bff28fe37ff

Timeline

Publicly Published
2016-10-18 (about 9 years ago)
Added
2019-06-24 (about 6 years ago)
Last Updated
2019-11-26 (about 6 years ago)

Other

Published
Title
Published
2020-07-06
Title
Security & Malware scan by CleanTalk < 2.51 - Security Nonce Leak leading to Unauthorised AJAX call
Published
2019-06-24
Title
HTML5 Maps <= 1.6.5.6 - CSRF & XSS
Published
2015-05-25
Title
NewStatPress 0.9.8 - XSS & SQL Injection
Published
2017-11-13
Title
Formidable Forms < 2.05.03 - Multiple Vulnerabilities
Published
2019-07-29
Title
Real Estate 7 < 2.9.1 - Stored XSS & IDOR