CVE-2019-14467

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo…

published November 18, 2019

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01760 · 77.8th percentile
Published
2019-11-18T15:21Z
EPSS history
Timeline
  • 18 NOV 15:21Z
    The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo…
    cvelistv5