CVE-2015-7527

HIGH 7.5CVE-2015-7527 · Published 17/12/2015 · updated 17/06/2026

In short

CVE-2015-7527 is a HIGH (CVSS 7.5) vulnerability affecting cool video gallery (cool video gallery project).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cool video gallery cool_video_gallery_project	`= 1.9`	No fix yet

Description

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

References

packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html · Exploit
openwall.com/lists/oss-security/2015/12/02/9 · Exploit
securityfocus.com/archive/1/537051/100/0/threaded
vapidlabs.com/advisory.php · Exploit
wordpress.org/support/topic/command-injection-vulnerability-in-v19 · Exploit
wpvulndb.com/vulnerabilities/8348

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free