Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery <= 1.0.12 - Unauthenticated Directory Traversal
mediumThe Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.12. This makes it possible for unauthenticated attackers to perform actions on files outside of the originally intended directory.
- CVSS:
- 5.3
- Affected:
- up to 1.0.12
- Fix:
- No patched version reported
- Disclosed:
- Jun 9, 2025