Skip to content
Sign in
4.9 Medium

CVE-2023-3279 The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to…

Description

The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks

Affected products and versions

Product Affected versions Fixed in
WordPress Gallery Plugin 3.39 earliest → < 3.39 3.39

Other CVEs of WordPress Gallery Plugin

The 3 CVEs of WordPress Gallery Plugin →
CVE-2023-3155 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a… 7.2 High CVE-2023-3154 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input… 7.5 High
Track this CVE