7.2
CVSSv3

CVE-2023-3155

Published: 16/10/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 0

Vulnerability Summary

The WordPress Gallery Plugin WordPress plugin prior to 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an malicious user to access arbitrary resources on the server.

Vulnerable Product Search on Vulmon Subscribe to Product

imagely nextgen gallery