11774 matches found
CVE-2023-1427 Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector...
CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...
CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...
CVE-2023-0764 Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role...
CVE-2023-0764
CVE-2023-0764 affects the Gallery by BestWebSoft WordPress plugin (versions
WordPress Plugin Gallery by BestWebSoft 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Plugin Gallery by BestWebSoft SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
PT-2023-16975 · 10Web · The Photo Gallery
Name of the Vulnerable Software and Affected Versions: The Photo Gallery by 10Web WordPress plugin versions prior to 1.8.15 Description: The issue allows high privilege users to upload files outside of the intended uploads folder due to a path traversal vector, potentially enabling them to place...
PT-2023-16512 · Bestwebsoft · The Gallery
Name of the Vulnerable Software and Affected Versions: The Gallery by BestWebSoft WordPress plugin versions prior to 4.7.0 Description: The issue arises from improper sanitization of gallery information, leading to a Stored Cross-Site Scripting vulnerability. An attacker must have at least the...
WordPress Plugin Photo Gallery by 10Web 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress InPost Gallery Plugin <= 2.1.4.1 is vulnerable to Cross Site Scripting (XSS)
Software InPost Gallery Type Plugin Vulnerable versions = 2.1.4.1 Fixed in 2.1.4.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28666 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID a2e097871dba Credits Joshua Martinelle...
WordPress Gallery Plugin < 4.7.0 is vulnerable to SQL Injection
Software Gallery Type Plugin Vulnerable versions 4.7.0 Fixed in 4.7.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0765 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 85ca584ad7e5 Credits dc11 Required privilege Author Published 12 April, 2023...
WordPress 1 jQuery Photo Gallery Slideshow Flash Plugin < 1.8.15 is vulnerable to Path Traversal
Software 1 jQuery Photo Gallery Slideshow Flash Type Plugin Vulnerable versions 1.8.15 Fixed in 1.8.15 OWASP Top 10 A1: Injection Classification Path Traversal CVE CVE-2023-1427 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID d99626b803b8 Credits Nguyen Huu Do Required...
CVE-2014-125096
A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file class.options.php of the component Options Page. The manipulation leads to cross site scripting. The attack can be...
Cross site scripting
A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file class.options.php of the component Options Page. The manipulation leads to cross site scripting. The attack can be...
CVE-2014-125096
CVE-2014-125096 affects Fancy Gallery Plugin 1.5.12 for WordPress. The vulnerability arises in an unknown function of the file class.options.php within the Options Page, enabling cross-site scripting through remote manipulation. Upgrading to version 1.5.13 addresses the issue (patch: fdf1f9e5a1ec...
PT-2023-10164 · WordPress · Fancy Gallery Plugin
Name of the Vulnerable Software and Affected Versions: Fancy Gallery Plugin version 1.5.12 Description: A vulnerability was found in the Fancy Gallery Plugin on WordPress, affecting an unknown functionality of the file class.options.php of the component Options Page. The manipulation leads to cro...
WordPress plugin Fancy Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
