Wordpress Gallery Plugin (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-10-16. Vendor: Unknown.

CVEs of Wordpress Gallery Plugin

• CVE-2023-3155 - CVSS 7.2 (high), 2023-10-16: The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the…
• CVE-2023-3154 - CVSS 7.5 (high), 2023-10-16: The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the…
• CVE-2023-3279 - CVSS 4.9 (medium), 2023-10-16: The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include…