48hmorris vulnerabilities
We track 1 vulnerability in 48hmorris products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest 48hmorris vulnerabilities
- 7.5 High severity
Assistant for NextGEN Gallery: Improper Limitation of a Pathname to a Restricted Directory
The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes