Extension WordPress
Vulnérabilités Photo Gallery by 10Web – Mobile-Friendly Image Gallery, page 4
Cette page rassemble les failles publiées pour Photo Gallery by 10Web – Mobile-Friendly Image Gallery, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Photo Gallery by 10Web – Mobile-Friendly Image Gallery
65 fiches
Photo Gallery by 10Web <= 1.2.10 – Authenticated Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the (1) sort_by, (2) sort_order, (3) items_view, (4) dir, (5) clipboard_task, (6)…
[*, 1.2.11)
1.2.11
28/01/2015
Photo Gallery by 10Web <= 1.2.10 – Authenticated SQL Injection via asc_or_desc Parameter
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the asc_or_desc parameter in a create gallery request in the galleries_bwg page to wp-admin/admin.php.
[*, 1.2.11)
1.2.11
23/01/2015
Photo Gallery by 10Web <= 1.2.7 – Unauthenticated Blind SQL Injection via order_by Parameter
SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox action to wp-admin/admin-ajax.php.
[*, 1.2.8)
1.2.8
12/01/2015
Photo Gallery by 10Web <= 1.1.30 – Reflected Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) callback, (2) dir, or (3) extensions parameter in an…
*-1.1.30
1.1.31
01/10/2014
Photo Gallery by 10Web <= 1.2.41 – Cross-Site Request Forgery
The Photo Gallery plugin before 1.2.42 for WordPress has CSRF.
[*, 1.2.42)
1.2.42
07/05/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.