tinymce_thumbnail_gallery vulnerabilities

CVEs whose affected-version data names the tinymce_thumbnail_gallery package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2012-20002High· 7.5

yesterday

TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php

TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-im…

▾ TwilightJames Charlesworth · TinyMCE Thumbnail Galleryvia CVEORG