CVE-2014-2558

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a…

published May 6, 2014

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01746 · 77.5th percentile
Published
2014-05-06T14:00Z
EPSS history
Timeline
  • 06 MAY 14:00Z
    The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a…
    cvelistv5