CVE-2019-14798

MEDIO 4.9CVE-2019-14798 · Published 09/08/2019 · updated 17/06/2026

En resumen

CVE-2019-14798 es una vulnerabilidad MEDIO (CVSS 4.9) que afecta a photo gallery (10web).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.4%, mayor que el 91.4% de las vulnerabilidades.
Solución: actualizar a 1.5.25 o posterior.

Package	Affected versions	Patched versions
photo gallery 10web	`< 1.5.25`	`1.5.25`

Description

The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter.

References

wordpress.org/plugins/photo-gallery · Third Party Advisory
wpvulndb.com/vulnerabilities/9361 · Third Party Advisory
pluginvulnerabilities.com/2019/05/14/authenticated-local-file-inclusion-lfi-vulnerability-in-photo-gallery-by-10web · Exploit

Más vulnerabilidades de photo gallery

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photo gallery

10web

< 1.5.25

1.5.25

Más vulnerabilidades de photo gallery

Ver todo →