Lucene search
WordFencePATCHSTACK:223CC60BDD9A80944CAB5A479196EB1FHistoryFeb 08, 2021 - 12:00 a.m.
WordPress NextGen Gallery plugin <= 3.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to file upload
2021-02-0800:00:00
WordFence
patchstack.com
14
0.001 Low
EPSS
Percentile
27.5%
Cross-Site Request Forgery (CSRF) vulnerability leading to file upload found by WordFence in WordPress NextGen Gallery plugin (versions <= 3.4.7).
Solution
Update the WordPress NextGen Gallery plugin to the latest available version (at least 3.5.0)
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextgen gallery | le | 3.4.7 |
Related
cve
cve
CVE-2020-35943
2021-02-09 18:15:45
prion
prion
Cross site request forgery (csrf)
2021-02-09 18:15:00
nvd
nvd
CVE-2020-35943
2021-02-09 18:15:45
cvelist
cvelist
CVE-2020-35943
2021-02-09 17:49:27
wpvulndb
wpvulndb
NextGen Gallery < 3.5.0 - CSRF allows File Upload
2021-02-08 00:00:00
threatpost
threatpost
Critical WordPress Plugin Flaw Allows Site Takeover
2021-02-08 21:11:57
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.5.0 Multiple Vulnerabilities
2021-02-11 00:00:00