WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
lowThe WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer plugin for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 1.3. This is due to the plugin improperly validating the path to requested file downloads. This makes it possible fo...
- CVSS:
- 2.7
- Affected:
- up to 1.3
- Fix:
- No patched version reported
- Disclosed:
- Apr 5, 2024