The Image Gallery Box plugin for WordPress, created by CRUDLab, has a security issue where it is possible for attackers with subscriber-level access or higher to include and run any files on the server. This could allow them to bypass security measures, access sensitive information, or run malicious code. This issue is present in all versions up to 1.0.3.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
