11841 matches found
WordPress 10Web Photo Gallery Plugin Path Traversal Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.10Web Photo Gallery plugin is an image management plugin used in it. A path traversal vulnerability exists in the WordPress...
WordPress 10Web Photo Gallery plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.10Web Photo Gallery plugin is an image management plugin used in it. A cross-site scripting vulnerability exists in the...
WP Social Feed Gallery < 2.4.8 - CSRF & Missing Authorisation Checks
The lack of CSRF and Authorisations checks in some AJAX methods, such as qliggdismissnotice and qliggformitemdelete could allow attacker to perform unauthorised actions via actions when logged in as a low privilege user, or via CSRF attacks...
CVE-2019-14798
The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcodebwg tagtext parameter...
CVE-2019-14797
The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...
CVE-2019-14797
The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...
Cross site scripting
The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...
CVE-2019-14797
The CVE-2019-14797 entry concerns the WordPress plugin Photo Gallery by 10Web (WordPress, prior to version 1.5.23). The vulnerability is an authenticated stored XSS in the plugin, as stated across multiple connected sources. In practical terms, an authenticated attacker could inject malicious scr...
CVE-2019-14797
The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS...
CVE-2019-14798
The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcodebwg tagtext parameter...
CVE-2019-14798
The CVE-2019-14798 case concerns the WordPress plugin Photo Gallery by 10Web (before 1.5.25). Affected component: wp-admin/admin-ajax.php handling of action=shortcode_bwg with the tagtext parameter. Root cause: Authenticated Local File Inclusion via directory traversal, enabling access to files o...
WordPress Photo Gallery Plugin < 1.5.31 SQLi Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
WordPress WordPress 10Web Photo Gallery Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.10Web Photo Gallery plugin is an image management plugin used in it. A SQL injection vulnerability exists in WordPress 10Web...
CVE-2019-14313
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
CVE-2019-14313
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
Sql injection
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
CVE-2019-14313
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
CVE-2019-14313
The CVE-2019-14313 issue affects the WordPress Photo Gallery (10Web) plugin versions prior to 1.5.31. The vulnerability is a SQL injection in filemanager/model.php that could allow a remote attacker to execute arbitrary SQL commands on the affected site. The NVD and Red Hat entries corroborate a ...
PT-2019-13601 · 10Web · 10Web Photo Gallery
Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.31 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the filemanager/model.php. Recommendations: For versions...