Skip to content
OpenAdvisories

Vendor

webdzier

3 known vulnerabilities.

Products

Gallery 1 Hotel Galaxy 1 Button 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-11501

    Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

    The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level a…

    webdzier Gallery Web / CMS