WordPress WP Easy Gallery Plugin <= 2.7 - SQL Injection

This plugin is prone to SQL injection via admin/overview.php galleryId parameter and admin/add-images.php multiple parameter. Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.8.3 - Multiple Vulnerabilities

This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.7.3 - Full Path Disclosure

This plugin is prone to xml/ajax.php full path disclosure vulnerability. Solution Update the plugin...

WordPress GRAND Flash Album Gallery Plugin <= 1.71 - XSS

This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php skin parameter. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.7 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in swfupload.swf . Solution Upgrade the plugin...

WordPress NextGen Cu3er Gallery Plugin - Information Disclosure

This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...

WordPress Mac Photo Gallery Plugin <= 2.9 - Multiple Vulnerabilities

This plugin is prone to multiple script insertion vulnerabilities. Because of them, attackers can conduct script insertion attacks. Solution Upgrade plugin...

WordPress Gallery Plugin <= 3.8.3 - Arbitrary File Access

This plugin is prone to an arbitrary file access in gallery-plugin.php filename1 parameter. It allows attackers to read arbitrary files. Solution Upgrade plugin...

WordPress NextGEN Gallery Plugin <= 2.0.0 - Directory Traversal

An unauthenticated POST request to a particular URI with a particular parameter lists the contents of arbitrary directories. Solution Update the plugin...

WordPress Mac Photo Gallery Plugin - Bypass

This plugin is prone to two security bypass security issues. Attackers can bypass certain security restrictions. Solution Update the plugin...

WordPress 1 Flash Gallery plugin <= 1.9.0 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered in WordPress 1 Flash Gallery plugin versions = 1.9.0. Solution Deactivate and delete. This plugin has been closed and is no longer available for download...

WordPress Portfolio Gallery Plugin <= 1.1.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress WP Easy Gallery Plugin <= 4.1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Matrix Image Gallery Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Matrix Image Gallery Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Random image gallery with pretty photo zoom Plugin <= 7.4 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Gallery Bank Plugin <= 3.0.228 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Reflex Gallery Plugin <= 3.1.4 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Encaps PHP/Flash Gallery 2.3.22s Database Puffing Up Exploit

Hi guys, ref: http://www.milw00rm.com/exploits/5179 !/usr/bin/perl -w Title : Encaps PHP/Flash Gallery 2.3.22s Database Puffing Up Exploit Vendor : http://www.encaps.net Download : http://sourceforge.net/projects/encapsnet/files/ Author : ZoRLu / [email protected] Website : milw00rm.com /...

WordPress Contus Video Gallery Plugin SQL Injection Vulnerability

WordPress is a content management system developed using PHP language. Contus Video Gallery is a video gallery plugin for WordPress sites. A SQL injection vulnerability exists in Contus Video Gallery 2.7 and earlier versions due to the program failing to properly filter the content of the "vid" G...