CVE-2019-14467

The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.76% chance of exploitation in the next 30 days, 76th percentile

Published

2019-11-18

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/155357/WordPress-Social-Photo-Gallery-1.0-Remote-Cod…
• https://seclists.org/fulldisclosure/2019/Nov/13

References

• CVE Record
• NVD entry

Related

• CVE-2019-14450
• CVE-2019-14470
• CVE-2019-14444
• CVE-2019-14471
• CVE-2019-14443
• CVE-2019-14472