Critical · 10.0 CVE-2024-51790 EUVD-2024-45549GHSA-j8pr-x7hr-ggp9

WordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerability

Published Nov 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: HB WEBSOL Product: HB AUDIO GALLERY

Description

Unrestricted Upload of File with Dangerous Type vulnerability in HB WEBSOL HB AUDIO GALLERY hb-audio-gallery allows Upload a Web Shell to a Web Server.This issue affects HB AUDIO GALLERY: from n/a through <= 3.0.

Affected products

Vendor	Product	Affected	Fixed
HB WEBSOL	HB AUDIO GALLERY	≤ 3.0	—

References

https://patchstack.com/database/Wordpress/Plugin/hb-audio-gallery/vulnerability/wordpress-hb-audio-gallery-plugin-3-0-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry