CVE-2013-3684

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

CVE-2013-3684

The CVE-2013-3684 entry concerns the NextGEN Gallery WordPress plugin (pre-1.9.13) and a vulnerability in ngggallery.php that allows arbitrary file upload. Multiple connected sources confirm affected version (1.9.12 and earlier) and that unauthenticated uploads were possible, potentially enabling...