CVE-2019-14467

CVE-2019-14467 affects WordPress Social Photo Gallery plugin (v1.0) and enables remote code execution via uploading a malicious PHP file in an album cover, because the file extension is not checked. The exploit is local in terms of access vector and relies on uploading an executable file through ...