VULNERABILITY INTELLIGENCE

CVE-2015-1785

CVSS score6.5 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2022-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)
  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references