Skip to content

Product

skyphe file-gallery vulnerabilities

1 published CVE affecting skyphe file-gallery, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest skyphe file-gallery CVEs

Newest publication first

  1. CVE-2014-2558 File Gallery < 1.7.9.2 - Remote Code Execution

    Published
    MediumCVSS 6.5

    The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a ' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.