Powerplay Gallery Project » Powerplay Gallery : Security Vulnerabilities, CVEs,
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.
Max CVSS
7.5
EPSS Score
0.30%
Published
2017-05-23
Updated
2017-06-08
Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.
Max CVSS
7.5
EPSS Score
0.21%
Published
2015-08-18
Updated
2019-07-09
2 vulnerabilities found