Skip to content
OpenAdvisories

Product · maca134

WP Simple Galleries

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection

    The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallery_gallery' post meta via 'wpsgallery' shortcode. This allows authenticated…