CVE-2015-5681

2015-08-1815:59:06

web.nvd.nist.gov

cve-2015-5681

file upload

vulnerability

powerplay gallery plugin

wordpress

remote code execution

nvd

6.8 Medium

AI Score

Confidence

Low

0.106 Low

EPSS

Percentile

95.0%

CPENameOperatorVersion
wpslideshow:powerplay_gallerywpslideshow powerplay galleryeq3.3

CPE	Name	Operator	Version
wpslideshow:powerplay_gallery	wpslideshow powerplay gallery	eq	3.3

References

packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html

seclists.org/fulldisclosure/2015/Jul/64

www.openwall.com/lists/oss-security/2015/07/20/1

www.openwall.com/lists/oss-security/2015/07/27/8

www.vapid.dhs.org/advisory.php?v=132