CVEvulnerability

CVE-2023-6947

7.7 HIGH Published 2024-12-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-22, CWE-25

Description

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This makes it possible for authenticated attackers, with contributor level or higher to read the contents of arbitrary folders on the server, which can contain sensitive information such as folder structure.

Affected configurations

• fooplugins foogallery (< 2.4.27)

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-25 Path Traversal: '/../filedir' weakness

References