WordPress Gallery Plugin – NextGEN Gallery, CVE-2023-3154
- CVE, Research URL
- Application
- Published on
- Oct 17, 2023
- Research Description
- The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.
- Affected versions
-
Min -, max 3.39.
- Status
-
vulnerable