Unscored CVE-2019-14467 EUVD-2019-5653GHSA-77pv-pggh-8r9c

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in t…

Published Nov 18, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked.

References

https://wordpress.org/plugins/social-photo-gallery/#developers
http://packetstormsecurity.com/files/155357/WordPress-Social-Photo-Gallery-1.0-Remote-Code-Execution.html
https://wpvulndb.com/vulnerabilities/9952
20191115 WordPress Plugin Social Photo Gallery 1.0 - Remote Code Execution mailing-list