High severity8.8NVD Advisory· Published Jul 7, 2022· Updated Jun 17, 2026
CVE-2015-1784
CVE-2015-1784
Description
In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.0.77.3
Patches
Vulnerability mechanics
References
2- blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpressnvdExploitThird Party Advisory
- wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4nvdThird Party Advisory
News mentions
0No linked articles in our index yet.