81 matches found
WordPress plugin Gallery for Social Photo 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Gallery fo...
PT-2022-15298 · Gallery · Gallery
Name of the Vulnerable Software and Affected Versions: Gallery for Social Photo versions up to, and including 1.0.0.27 Description: The issue is related to Cross-Site Request Forgery due to the failure to properly check for the existence of a nonce in the gifeed duplicate feed function. This allo...
WordPress Gallery for Social Photo <= 1.0.0.29 - Cross-Site Request Forgery (CSRF) vulnerability leading to Post Duplication
Cross-Site Request Forgery CSRF vulnerability leading to Post Duplication discovered by Marco Wotschka in WordPress Gallery for Social Photo versions = 1.0.0.29. Solution No patched version available...
Gallery for Social Photo < 1.0.0.29 - Arbitrary Post Duplication via CSRF
The plugin does not have CSRF check in place when duplicating a post or page, which could allow attackers to make a logged in a admin duplicate them via a CSRF attack https://example.com/wp-admin/admin-ajax.php?action=gifeedduplicatefeed&post=12...
Gallery for Social Photo < 1.0.0.29 - Arbitrary Post Duplication via CSRF
The plugin does not have CSRF check in place when duplicating a post or page, which could allow attackers to make a logged in a admin duplicate them via a CSRF attack PoC https://example.com/wp-admin/admin-ajax.php?action=gifeedduplicatefeed=12...
WordPress 10Web Social Photo Feed Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress 10Web Social Photo Feed Plugin has a cross-site scripting vulnerability in versions prior to 1.4.29, which stems...
CVE-2021-25047 10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)
The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...
CVE-2021-25047
CVE-2021-25047 – 10Web Social Photo Feed Plugin : WordPress plugin versions before 1.4.29 are vulnerable to a reflected Cross-Site Scripting (XSS) on the wdi_apply_changes admin page, enabling an attacker to execute JavaScript in the context of any logged-in user. Root cause cited: lack of data v...
10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)
The plugin was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...
WordPress 10Web Social Photo Feed plugin <= 1.4.18 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze and Thura Moe Myint in WordPress 10Web Social Photo Feed plugin versions = 1.4.18. Solution Update the WordPress 10Web Social Photo Feed plugin to the latest available version at least 1.4.19...
WordPress Social Photo Gallery Plugin Remote Code Execution (CVE-2019-14467)
A remote code execution vulnerability exists in WordPress Social Photo Gallery Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2019-14467
The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked...
CVE-2019-14467
The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked...
Remote code execution
The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked...
CVE-2019-14467
The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked...
CVE-2019-14467
CVE-2019-14467 affects WordPress Social Photo Gallery plugin (v1.0) and enables remote code execution via uploading a malicious PHP file in an album cover, because the file extension is not checked. The exploit is local in terms of access vector and relies on uploading an executable file through ...
WordPress Social Photo Gallery Remote Code Execution Vulnerability
WordPress is a suite of blogging platforms from the WordPress Foundation developed using the PHP language.Social Photo Gallery is the ultimate lightbox plugin for WordPress. A remote code execution vulnerability exists in WordPress Social Photo Gallery, which can be exploited by an attacker to...
WordPress Social Photo Gallery 1.0 Remote Code Execution Vulnerability
Exploit for php platform in category web applications ============================================= - Discovered by: Prestigia Seguridad - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2019-14467 ============================================= I. VULNERABILITY ------------------------- WordPress...
WordPress Social Photo Gallery plugin <= 1.0 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability found by Prestigia Seguridad in WordPress Social Photo Gallery plugin versions = 1.0. Solution 19.11.2019 - we were unable to find a patched version of this plugin...