Lucene search
N/APATCHSTACK:22848AC7D87B7ED5384357735517526AHistoryAug 18, 2022 - 12:00 a.m.
WordPress All In One Video Gallery Plugin 2.5.8 to 2.6.0 - Unauthenticated Arbitrary File Download & SSRF vulnerability
2022-08-1800:00:00
N/A
patchstack.com
19
0.032 Low
EPSS
Percentile
91.3%
Unauthenticated Arbitrary File Download & SSRF vulnerability discovered by Gabriele Zuddas in All-in-One Video Gallery Plugin (versions 2.5.8 to 2.6.0)
Solution
Update the WordPress All-in-One Video Gallery plugin to the latest available version (at least 2.6.1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| all-in-one video gallery | ge | 2.5.8 | |
| all-in-one video gallery | le | 2.6.0 |
Related
cvelist
cvelist
CVE-2022-2633
2022-09-06 17:18:59
nvd
nvd
CVE-2022-2633
2022-09-06 18:15:14
cve
cve
CVE-2022-2633
2022-09-06 18:15:14
nuclei
nuclei
All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery
2022-09-28 17:20:46
wpvulndb
wpvulndb
prion
prion
Server side request forgery (ssrf)
2022-09-06 18:15:00