| Package | Affected versions | Patched versions |
|---|---|---|
| powerplay gallery | = 3.3 |
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free