InPost Gallery vulnerabilities
We track 1 vulnerability in InPost Gallery products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 19, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest InPost Gallery vulnerabilities
- 9.8 Critical severity
InPost Gallery: Improper Limitation of a Pathname to a Restricted Directory
The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.