WordPress Plugin Vulnerabilities

UnGallery - Arbitrary Comm& Execution

Description

The UnGallery WordPress plugin was affected by an Arbitrary Comm& Execution security vulnerability.

Affects Plugins

Plugin icon
ungallery
Fixed in 2.1.6

References

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
ed1d5699-a81d-4325-90f3-0c615374c2e5

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Contributor+ PHP Code Injection via Loop Custom Field
Published
2025-03-26
Title
PDF for WPForms < 5.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Published
2024-10-14
Title
AADMY – Add Auto Date Month Year Into Posts < 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Published
2024-10-18
Title
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
Published
2024-09-13
Title
FOX – Currency Switcher Professional for WooCommerce < 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution