CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2015-1000007

CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...