WordPress Gallery Plugin – NextGEN Gallery, CVE-2023-3155
- CVE, Research URL
- Application
- Published on
- Oct 17, 2023
- Research Description
- The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.
- Affected versions
-
max 3.39.
- Status
-
vulnerable