CVE-2015-7527

CVE-2015-7527 affects the WordPress plugin Cool Video Gallery (version 1.9 and earlier). The issue is a remote command-injection vulnerability in lib/core.php, where user-supplied input (notably the "Width of preview image" on the Video Gallery Settings page) can be used to inject shell commands ...