Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 3:17 a.m.25 views

CVE-2025-13645

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary...

7.2CVSS7.5AI score0.01007EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/03 3:16 a.m.17 views

CVE-2025-13646

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files...

7.5CVSS0.00737EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/03 3:15 a.m.15 views

CVE-2025-13645

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary...

7.2CVSS0.01007EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/12/03 2:25 a.m.10 views

CVE-2025-13645 Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary...

7.2CVSS7.2AI score0.01007EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/12/03 2:25 a.m.11 views

EUVD-2025-200725

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary...

7.2CVSS7.1AI score0.01007EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/12/03 2:25 a.m.38 views

CVE-2025-13645 Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajaxunzipfile' function in versions 2.13.1 to 2.13.2. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary...

7.2CVSS0.01007EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/12/03 12:00 a.m.12 views

WordPress plugin Modula Image Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

7.5CVSS6.8AI score0.00737EPSS
SaveExploits0References6
Rows per page
Query Builder