CVE Database /
CVE-2015-1785
CVE · High
CVE-2015-1785 — Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.77.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-1784, CVE-2015-1785
|
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.77.3 |
Unrestricted Upload of File with Dangerous Type |
High
8.8
|
< 2.0.77.3
|
2.0.77.3 |
2015-03-25 |
—
|
CVE-2015-1784, CVE-2015-1785
NextGEN Gallery versions prior to 2.0.77.3 contain two security flaws that could permit attackers to obtain complete control over the affected web application. The first vulnerability involves inadequate validation of files submitted by users, while the second stems from insufficient protections against unauthorized HTTP requests. Together, these weaknesses create a path for attackers to compromise the website's functionality and data.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings