← back
CVE-2015-1784

CVE-2015-1784

EPSS 1.6%CWE-434
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS EPSS 1.6%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
07 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
Affected products
n/a · nextgen-gallery

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →