Lucene search
HistoryOct 16, 2023 - 8:15 p.m.
CVE-2023-3154
wordpress
gallery plugin
phar deserialization
input validation
arbitrary access
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.5%
The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the gallery_edit function, allowing an attacker to access arbitrary resources on the server.
Affected configurations
Node
imagelynextgen_galleryRange<3.39wordpress
Related
prion
prion
Deserialization of untrusted data
2023-10-16 20:15:00
cvelist
cvelist
CVE-2023-3154 NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-10-16 19:39:06
cve
cve
CVE-2023-3154
2023-10-16 20:15:14
wpexploit
wpexploit
NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-09-25 00:00:00
wpvulndb
wpvulndb
NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-09-25 00:00:00
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.39 Multiple Vulnerabilities
2023-10-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.5%
Related for NVD:CVE-2023-3154