Skip to content
Sign in
7.2 High

CVE-2023-3155 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a…

Description

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.

Affected products and versions

Product Affected versions Fixed in
WordPress Gallery Plugin 3.39 earliest → < 3.39 3.39

Other CVEs of WordPress Gallery Plugin

The 3 CVEs of WordPress Gallery Plugin →
CVE-2023-3279 The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to… 4.9 Medium CVE-2023-3154 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input… 7.5 High
Track this CVE