CVE-2019-14467
The Social Photo Gallery plugin 1.0 for WordPress allows Remote Code Execution by creating an album and attaching a malicious PHP file in the cover photo album, because the file extension is not checked.
CVSS 3.1 · 7.8 High
EPSS 1.8%
KEV · Not listed
Vendors
Products