Extension WordPress

Vulnérabilités FW Gallery – Photo, video, audio media presentation and management system with players and slideshow

Cette page rassemble les failles publiées pour FW Gallery – Photo, video, audio media presentation and management system with players and slideshow, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
2Critiques
0Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de FW Gallery – Photo, video, audio media presentation and management system with players and slideshow

3 fiches

CVE-2025-49414 Critique · 9,8
FW Gallery – Photo, video, audio media presentation and management system with players and slideshow

FW Gallery <= 8.0.0 – Unauthenticated Arbitrary File Upload

The FW Gallery – Photo, video, audio media presentation and management system with players and slideshow plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including,…

Versions affectées

*-8.0.0

Correctif

Non indiqué

Publication

30/06/2025

CVE-2025-49416 Élevée · 8,1
FW Gallery – Photo, video, audio media presentation and management system with players and slideshow

FW Gallery <= 8.0.0 – Unauthenticated Local File Inclusion

The FW Gallery plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 8.0.0. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution…

Versions affectées

*-8.0.0

Correctif

Non indiqué

Publication

25/06/2025

CVE-2025-49415 Critique · 9,1
FW Gallery – Photo, video, audio media presentation and management system with players and slideshow

FW Gallery <= 8.0.0 – Unauthenticated Arbitrary File Deletion

The FW Gallery – Photo, video, audio media presentation and management system with players and slideshow plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up…

Versions affectées

*-8.0.0

Correctif

Non indiqué

Publication

10/06/2025

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités