| Package | Affected versions | Patched versions |
|---|---|---|
| nextgen gallery | < 3.39 | 3.39 |
The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free