CVE-2023-3279

Published: 2023-10-16T20:15Z

Last Modified: 2024-11-21T08:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks > MITRE Terms of Use apply – see LICENSE‑MITRE.txt