Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
•added 2025/10/19 3:44 a.m.•21 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS6.9AI score0.00735EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/18 6:30 a.m.•17 views

EUVD-2017-18923

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS6.4AI score0.00735EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/18 4:15 a.m.•20 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS5.8AI score0.00735EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/18 4:15 a.m.•19 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS0.00735EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/18 3:33 a.m.•13 views

CVE-2017-20207 Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS6.5AI score0.00735EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/18 3:33 a.m.•33 views

CVE-2017-20207 Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS0.00735EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/18 3:33 a.m.•40 views

CVE-2017-20207

The Flickr Gallery plugin for WordPress (versions up to and including 1.5.2 ) is vulnerable to PHP Object Injection . The root cause is the deserialization of untrusted input from the pager parameter, which allows unauthenticated attackers to inject a PHP Object. This vulnerability has been activ...

9.8CVSS6.5AI score0.00735EPSS
SaveIn wildExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/18 12:00 a.m.•18 views

PT-2025-42675

Name of the Vulnerable Software and Affected Versions Flickr Gallery plugin for WordPress versions up to and including 1.5.2 Description The software is susceptible to PHP Object Injection due to deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to...

9.8CVSS6.8AI score0.00735EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•2 views

CVE-2017-20207: Deserialization of Untrusted Data

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

9.8CVSS5.8AI score0.00735EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/18 12:00 a.m.•13 views

WordPress plugin Flickr Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.3AI score0.00735EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-45462

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:26 a.m.•16 views

CVE-2024-51630

Cross-Site Request Forgery CSRF vulnerability in Lars Schenk Responsive Flickr Gallery responsive-flickr-gallery allows Stored XSS.This issue affects Responsive Flickr Gallery: from n/a through = 1.3.1...

7.1CVSS5.9AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/09 2:15 p.m.•39 views

CVE-2024-51630

Cross-Site Request Forgery CSRF vulnerability in Lars Schenk Responsive Flickr Gallery responsive-flickr-gallery allows Stored XSS.This issue affects Responsive Flickr Gallery: from n/a through = 1.3.1...

7.1CVSS0.00168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/09 1:20 p.m.•23 views

CVE-2024-51630 WordPress Responsive Flickr Gallery plugin <= 1.3.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Lars Schenk Responsive Flickr Gallery responsive-flickr-gallery allows Stored XSS.This issue affects Responsive Flickr Gallery: from n/a through = 1.3.1...

7.1CVSS5.9AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 1:20 p.m.•58 views

CVE-2024-51630

CVE-2024-51630 is a Cross-Site Request Forgery (CSRF) to Stored XSS vulnerability in the WordPress Responsive Flickr Gallery plugin, affecting versions

7.1CVSS5.9AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/09 12:00 a.m.•17 views

WordPress plugin Responsive Flickr Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS6.5AI score0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•1 views

CVE-2024-51630: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Lars Schenk Responsive Flickr Gallery responsive-flickr-gallery allows Stored XSS.This issue affects Responsive Flickr Gallery: from n/a through = 1.3.1...

7.1CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/11/01 8:12 a.m.•12 views

WordPress Responsive Flickr Gallery plugin <= 1.3.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Responsive Flickr Gallery versions = 1.3.1...

7.1CVSS6.2AI score0.00168EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/01 12:00 a.m.•19 views

WordPress Responsive Flickr Gallery Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Responsive Flickr Gallery Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51630 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2660d8485b1c Credits SOPROBRO...

7.1CVSS6.6AI score0.00168EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2017/12/12 12:00 a.m.•31 views

Flickr Gallery Plugin for WordPress < 1.5.3 PHP Object Injection

According to its self-reported version, the Flickr Gallery Plugin for WordPress running on the remote web server is prior to 1.5.3. It is, therefore, affected by a PHP object injection vulnerability. An unauthenticated, remote attacker can exploit this to inject PHP objects and execute arbitrary...

6.1AI score
SaveExploits0References2
Rows per page
Query Builder