Lucene search
HistoryOct 16, 2023 - 8:15 p.m.
CVE-2023-3155
wordpress
gallery plugin
arbitrary file read
arbitrary file delete
input parameter validation
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.4%
The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the gallery_edit function, allowing an attacker to access arbitrary resources on the server.
Affected configurations
Node
imagelynextgen_galleryRange<3.39wordpress
Related
wpvulndb
wpvulndb
NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete
2023-09-25 00:00:00
wpexploit
wpexploit
NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete
2023-09-25 00:00:00
cve
cve
CVE-2023-3155
2023-10-16 20:15:14
prion
prion
Design/Logic Flaw
2023-10-16 20:15:00
cvelist
cvelist
CVE-2023-3155 NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete
2023-10-16 19:39:07
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.39 Multiple Vulnerabilities
2023-10-18 00:00:00
wordfence
wordfence
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
19.4%
Related for NVD:CVE-2023-3155