Skip to content
OpenAdvisories

Vendor

ggnomes

3 known vulnerabilities.

Products

Garden Gnome Package 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-12854

    Garden Gnome Package <= 2.3.0 - Authenticated (Author+) Arbitrary File Upload

    The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0. This …

    ggnomes Garden Gnome Package Web / CMS