wptf-image-gallery [wptf-image-gallery] <= 1.0.3 (unfixed + closed)
unknown[en] Remote file download vulnerability in wptf-image-gallery v1.03
- Affected:
- up to 1.0.3
- Fix:
- No patched version reported
- Disclosed:
- Oct 6, 2016
plugin
3 known security issues reported for the Wptf Image Gallery WordPress plugin. Most recent disclosed Oct 6, 2016.
Running Wptf Image Gallery on your site? Check whether your installed version is affected.
Scan your site free[en] Remote file download vulnerability in wptf-image-gallery v1.03
WPTF Image Gallery plugin is prone to an arbitrary file download vulnerability via "/wptf-image-gallery/lib-mbox/ajax_load.php ". It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Upgrade the plugin.
The wptf-image-gallery plugin for WordPress is vulnerable to Arbitrary File Downloads in versions up to, and including, 1.0.3 via the './wptf-image-gallery/lib-mbox/ajax_load.php' file. This makes it possible for unauthenticated attackers to download sensitive files from the vulnerable system.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free