PT-2020-7328 · WordPress · Nextgen Gallery Plugin

Published 2020-01-30 · Updated 2020-02-06 · CVE-2013-0291

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NextGEN Gallery Plugin for WordPress versions 1.9.10 through 1.9.11

Description: The issue is related to a Path Disclosure Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For versions 1.9.10 and 1.9.11, update to a version that fixes the Path Disclosure Vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-0291

Affected Products

Nextgen Gallery Plugin

References · 5

• 🔥 http://openwall.com/lists/oss-security/2013/02/15/3 · Exploit
• 🔥 https://exploit-db.com/exploits/38314 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-0291 · Security Note
• https://t.me/cvenotify/642 · Telegram Post
• http://securityfocus.com/bid/57957 · Note