Lucene search
+L

14 matches found

Kitploit
Kitploit
•added 2026/10/11 2:53 p.m.•18 views

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use bash upger.sh yourlist.txt thread...

9.8CVSS8.3AI score0.42723EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2023/12/21 12:00 a.m.•15 views

The vulnerability of the User Post Gallery plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the User Post Gallery plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.42723EPSS
SaveExploits2References2Affected Software1
GithubExploit
GithubExploit
•added 2023/06/28 10:34 a.m.•877 views

Exploit for CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote...

8.8CVSS9.2AI score0.22452EPSS
SaveExploits3
NVD
NVD
•added 2023/01/16 4:15 p.m.•34 views

CVE-2022-4060

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

9.8CVSS9.5AI score0.42723EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/01/16 3:38 p.m.•56 views

CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

9.8AI score0.42723EPSS
SaveExploits2References1
CVE
CVE
•added 2023/01/16 3:38 p.m.•237 views

CVE-2022-4060

The User Post Gallery WordPress plugin, versions 2.19 and earlier , is vulnerable to Remote Code Execution (RCE) . The root cause is an insufficient authorization procedure where the plugin fails to limit which callback functions can be invoked by users. This allows unauthenticated attackers to e...

9.8CVSS9.5AI score0.42723EPSS
SaveIn wildExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/16 3:38 p.m.•19 views

CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

9.7AI score0.42723EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/01/16 12:00 a.m.•14 views

WordPress plugin User Post Gallery 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin User Post Gallery 2.19 and...

9.8CVSS8.7AI score0.42723EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/01/16 12:00 a.m.•18 views

PT-2023-7904 · WordPress · User Post Gallery

Name of the Vulnerable Software and Affected Versions: User Post Gallery WordPress plugin versions 2.19 and earlier Description: The issue is related to insufficient authorization procedure in the User Post Gallery WordPress plugin, allowing remote attackers to execute arbitrary code. This is...

10CVSS7.6AI score0.42723EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/16 12:00 a.m.•4 views

CVE-2022-4060: Undefined Security Weakness

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

9.8CVSS5.8AI score0.42723EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/01/03 12:00 a.m.•14 views

WordPress plugin User Post Gallery 命令注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A command injection vulnerability...

5.9AI score
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/03 12:00 a.m.•17 views

PT-2023-15965 · WordPress · The User Post Gallery - Upg

Name of the Vulnerable Software and Affected Versions: The User Post Gallery - UPG plugin for WordPress versions up to, and including 2.19 Description: The issue allows for authorization bypass, leading to remote command execution due to the use of a nopriv AJAX action and user-supplied function...

7.3AI score
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2022/12/26 12:00 a.m.•7 views

VulnCheck KEV: CVE-2022-4060

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it...

9.8CVSS8.1AI score0.42723EPSS
SaveIn wildExploits2References2
WPVulnDB
WPVulnDB
•added 2022/12/23 12:00 a.m.•40 views

User Post Gallery <= 2.19 - Unauthenticated RCE

The plugin does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it. PoC Invoke the following curl command to execute the "id" command via PHP's exec function: curl -i...

9.8CVSS4.9AI score0.42723EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder