WordPress Plugin Vulnerabilities

NextGEN Gallery < 2.0.66 - Arbitrary File Upload

Description

The user must have upload privileges.

Affects Plugins

Plugin icon
nextgen-gallery
Fixed in 2.0.66

References

URL
https://packetstormsecurity.com/files/#127340/

Miscellaneous

Verified
No
WPVDB ID
ed416430-b0f1-4713-ac3c-98e73dfc7c97

Timeline

Publicly Published
2014-05-20 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-03-19
Title
Management App for WooCommerce < 1.2.3 - Subscriber+ Arbitrary File Upload
Published
2022-11-21
Title
Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload
Published
2025-07-03
Title
WPvivid Backup & Migration < 0.9.117 - Admin+ Arbitrary File Upload
Published
2024-10-25
Title
Marketing Automation by AZEXO <= 1.27.80 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2024-10-17
Title
WP REST API FNS <= 1.0.0 - Unauthenticated Arbitrary File Upload