3 matches found
CVE-2015-1000007
Remote file download vulnerability in wptf-image-gallery v1.03...
7.5CVSS7.6AI score0.02325EPSS
SaveExploits2References1
CVE-2015-1000007
CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...
7.5CVSS8AI score0.02325EPSS
SaveExploits2References1Affected Software1
20