PT-2024-33396 · WordPress · Wordpress Gallery Plugin

·

CVE-2024-49258

·

Published

2024-10-16

·

Updated

2024-10-16

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Limb WordPress Gallery Plugin – Limb Image Gallery versions 1.5.7 and earlier
Description The issue is a Path Traversal vulnerability, specifically a '.../...//' vulnerability. This problem affects the Limb WordPress Gallery Plugin, allowing potential unauthorized access to files.
Recommendations For versions 1.5.7 and earlier, update to a version later than 1.5.7 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-49258

Affected Products

Wordpress Gallery Plugin