Lucene search
PRIOn knowledge basePRION:CVE-2023-3154HistoryOct 16, 2023 - 8:15 p.m.
Deserialization of untrusted data
2023-10-1620:15:00
PRIOn knowledge base
www.prio-n.com
6
deserialization untrusted data wordpress plugin nvd phar
0.001 Low
EPSS
Percentile
36.4%
The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the gallery_edit function, allowing an attacker to access arbitrary resources on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextgen_gallery | lt | 3.39 |
Related
wpvulndb
wpvulndb
NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-09-25 00:00:00
cvelist
cvelist
CVE-2023-3154 NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-10-16 19:39:06
nvd
nvd
CVE-2023-3154
2023-10-16 20:15:14
cve
cve
CVE-2023-3154
2023-10-16 20:15:14
wpexploit
wpexploit
NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
2023-09-25 00:00:00
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.39 Multiple Vulnerabilities
2023-10-18 00:00:00