The WordPress Gallery Plugin WordPress plugin prior to 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edit` function, allowing an malicious user to access arbitrary resources on the server.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
imagely nextgen gallery |
Vulmon