All packages
Powerplay Gallery plugin 3.3 for WordPress vulnerabilities
3 known CVE vulnerabilities in Powerplay Gallery plugin 3.3 for WordPress, translated and rated.
- CVE-2015-5682High
The Powerplay Gallery plugin version 3.3 for WordPress contains a vulnerability in upload.php that allows remote attackers to create arbitrary directories by manipulating the targetDir variable.
- CVE-2015-5681High
The Powerplay Gallery plugin version 3.3 for WordPress has an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
- CVE-2015-5599High
The Powerplay Gallery plugin version 3.3 for WordPress contains multiple SQL injection vulnerabilities in upload.php that allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.