12069 matches found
CVE-2012-6653
Unspecified vulnerability in the All Video Gallery all-video-gallery plugin before 1.2.0 for WordPress has unspecified impact and attack vectors...
CVE-2014-5186
The All Video Gallery (WordPress) plugin 1.2 is affected by CVE-2014-5186 through an SQL injection in the id parameter of the allvideogallery_videos edit action (wp-admin/admin.php). Remote authenticated administrators can execute arbitrary SQL commands. Remediation guidance from connected source...
CVE-2012-6653
CVE-2012-6653 affects the All Video Gallery WordPress plugin prior to 1.2.0. The vulnerability is an SQL Injection in the plugin’s config.php handling (multiple parameters), which can allow data modification and unauthorized access if exploited. Affected product: WordPress All Video Gallery plugi...
CVE-2014-5186
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...
WordPress All Video Gallery Plugin <= 1.2 - SQL Injection
Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands via the "id" parameter. Solution Update the plugin...
WordPress Gmedia Gallery 1.2.1 Shell Upload
Exploit Title : Wordpress Gmedia Gallery 1.2.1 Shell Upload Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.codeasily.com/ Software Link : http://downloads.wordpress.org/plugin/grand-media.zip Date : 2014-08-01 Tested on : Windows 7 / Mozilla Firefox Description : Any...
Cool Video Gallery 1.8 - admin/gallery-details.php Multiple Actions CSRF
The Cool Video Gallery WordPress plugin was affected by an admin/gallery-details.php Multiple Actions CSRF security vulnerability...
File Gallery 1.7.9 - Settings Page create_function Function Remote Comm& Execution
The File Gallery WordPress plugin was affected by a Settings Page createfunction Function Remote Comm& Execution security vulnerability...
Cool Video Gallery 1.8 - admin/gallery-manage.php Gallery Deletion CSRF
The Cool Video Gallery WordPress plugin was affected by an admin/gallery-manage.php Gallery Deletion CSRF security vulnerability...
Cool Video Gallery 1.8 - admin/gallery-sort.php Gallery Sort Order Manipulation CSRF
The Cool Video Gallery WordPress plugin was affected by an admin/gallery-sort.php Gallery Sort Order Manipulation CSRF security vulnerability...
Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation
The Lazyest Gallery WordPress plugin was affected by a Multiple File/Directory Insecure Permissions Local Content Manipulation security vulnerability...
Lazyest Gallery <= 1.1.20 - EXIF Script Insertion
The Lazyest Gallery WordPress plugin was affected by an EXIF Script Insertion security vulnerability...
Contus Video Gallery 2.0 & 1.6 - SQL Injection
The contus-video-gallery WordPress plugin was affected by a SQL Injection security vulnerability...
Picturesurf Gallery 1.2 - upload.php Arbitrary File Upload
The picturesurf-gallery WordPress plugin was affected by an upload.php Arbitrary File Upload security vulnerability...
Gallery Bank 2.0.19 - Multiple Unspecified Issues
The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by a Multiple Unspecified Issues security vulnerability...
Gallery Bank 2.0.19 - album-gallery-bank-class.php recordsArray Parameter Reflected XSS
The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by an album-gallery-bank-class.php recordsArray Parameter Reflected XSS security vulnerability...
Gallery Bank 2.0.19 - edit-album.php album_id Parameter Reflected XSS
The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by an edit-album.php albumid Parameter Reflected XSS security vulnerability...
Complete Gallery Manager 3.3.3 - Arbitrary File Upload
The complete-gallery-manager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...