WordPress photo-gallery plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...

Snap Creek Duplicator PHP Code Injection Vulnerability

Snap Creek Duplicator is a tool for migrating and backing up WordPress websites. A security vulnerability exists in Snap Creek Duplicator versions prior to 1.2.42. The vulnerability can be exploited by accessing the installer.php file and installer-backup.php file to inject PHP code into the...

PT-2018-13948

Name of the Vulnerable Software and Affected Versions Snap Creek Duplicator versions prior to 1.2.42 Description An issue allows an attacker to inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution by accessing leftover installer files, specifically...