4.9 Moyenne

CVE-2023-3279 The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to…

Description

The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks

Produits et versions touchés

Produit	Versions touchées	Corrigé en
WordPress Gallery Plugin 3.39	premières → < 3.39	3.39

Les 3 CVE de WordPress Gallery Plugin →

CVE-2023-3155 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a… 7.2 Élevée CVE-2023-3154 The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input… 7.5 Élevée

Vous utilisez WordPress Gallery Plugin ?

Suivre cette CVE Surveiller WordPress Gallery Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2023-3279

Chronologie

Publiée 16 octobre 2023
Dernière modification 23 avril 2025

Références

wpscan.com wpscan.com

Suivre cette CVE

CVE-2023-3279 The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to…

Description

Produits et versions touchés

Autres CVE de WordPress Gallery Plugin