Lucene search
WordFencePATCHSTACK:6344780F635F3AC0058849F0DAD32CCEHistoryFeb 08, 2021 - 12:00 a.m.
WordPress NextGen Gallery plugin <= 3.4.7 - Cross-Site Request Forgery (CSRF) leading to XSS and RCE via file upload and LFI
2021-02-0800:00:00
WordFence
patchstack.com
11
wordpress
nextgen gallery
plugin
cross-site request forgery
xss
remote code execution
file upload
local file inclusion
wordfence
update
EPSS
0.001
Percentile
38.5%
Cross-Site Request Forgery (CSRF) leading to XSS and RCE via file upload and LFI found by WordFence in WordPress NextGen Gallery plugin (versions <= 3.4.7).
Solution
Update the WordPress NextGen Gallery plugin to the latest available version (at least 3.5.0).
Related
wpvulndb
wpvulndb
NextGen Gallery < 3.5.0 - CSRF allows File Upload, Stored XSS, and RCE
2021-02-08 00:00:00
cvelist
cvelist
CVE-2020-35942
2021-02-09 17:49:23
cve
cve
CVE-2020-35942
2021-02-09 18:15:44
prion
prion
Cross site request forgery (csrf)
2021-02-09 18:15:00
nvd
nvd
CVE-2020-35942
2021-02-09 18:15:44
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.5.0 Multiple Vulnerabilities
2021-02-11 00:00:00
threatpost
threatpost
Critical WordPress Plugin Flaw Allows Site Takeover
2021-02-08 21:11:57