WordPress NextGEN Gallery Plugin < 3.39 is vulnerable to Arbitrary File Deletion

🗓️ 17 Oct 2023 00:00:00Reported by Linwz from DEVCOREType

WordPress NextGEN Gallery Plugin < 3.39 Arbitrary File Deletion CVE-2023-315

Reporter	Title	Published	Views	Family All 8
WPVulnDB	NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete	25 Sep 202300:00	–	wpvulndb
NVD	CVE-2023-3155	16 Oct 202320:15	–	nvd
Prion	Design/Logic Flaw	16 Oct 202320:15	–	prion
Cvelist	CVE-2023-3155 NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete	16 Oct 202319:39	–	cvelist
CVE	CVE-2023-3155	16 Oct 202320:15	–	cve
wpexploit	NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete	25 Sep 202300:00	–	wpexploit
OpenVAS	WordPress NextGEN Gallery Plugin < 3.39 Multiple Vulnerabilities	18 Oct 202300:00	–	openvas
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 25, 2023 to October 1, 2023)	5 Oct 202315:10	–	wordfence

Vulners

Node

imagely nextgen_galleryRange<3.39wordpress

Source	Link
wordpress	www.wordpress.org/plugins/nextgen-gallery/
cve	www.cve.org/CVERecord
wpscan	www.wpscan.com/vulnerability/5c8473f4-4b52-430b-9140-b81b0a0901da/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Oct 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS37.2