CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in ngocuct0912 WP Load Gallery wp-load-gallery allows Upload a Web Shell to a Web Server.This issue affects WP Load Gallery: from n/a through <= 2.1.6.
Explanation of Vulnerability in Simple Terms
WP Load Gallery versions 2.1.6 and earlier contain an unrestricted file upload vulnerability. An authenticated administrator can upload arbitrary files to the site, potentially including executable code. This can lead to complete compromise of the WordPress installation, including unauthorized access to sensitive data and site takeover.
What an attacker can do
Upload arbitrary files to the site, including executable code that runs on the server.
Potential impact on your site
An administrator account compromise allows complete site takeover, data theft, and malware installation.
Conditions required to exploit
Attacker must have administrator-level access to WordPress.
Key dates
External resources
Related vulnerabilities
