4 matches found
CVE-2024-4258 Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion
The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.13 via the settings parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the...
9.8CVSS8.2AI score0.0077EPSS
SaveExploits0References3
CVE-2024-4258
CVE-2024-4258 affects the WordPress plugin “Video Gallery – YouTube Playlist, Channel Gallery by YotuWP” (versions up to and including 1.3.13). The vulnerability is a Local File Inclusion via the settings parameter, allowing unauthenticated attackers to include and execute arbitrary PHP files on ...
9.8CVSS9.9AI score0.0077EPSS
SaveExploits0References3Affected Software1
20