blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2014-2558

MEDIUM 6.5 CVSS 2.0
Published
May 6, 2014
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-94
CVSS vector
AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.

Affected WordPress components

  • file-gallery Plugin · file-gallery
    Confirmed match Homeless
    Versions not specified; Version 1.6; Version 1.7; Version 1.5; Version 1.5.1; Version 1.7.3; Version 1.7.1; Version 1.7.6; Version 1.5.8; Version 1.6.5.6; Version 1.6.6; Version 1.6.3; Version 1.6.2; Version 1.7.5.1; Version 1.6.0.1; Version 1.6.5.1; Version 1.5.9; Version 1.6.5.2; Version 1.6.5.3; Version 1.7.7; Version 1.3; Up to and including 1.7.9; Version 1.7.5; Version 1.5.6; Version 1.6.5; Version 1.5.5; Version 1.5.3; Version 1.5.4; Version 1.7.4.1; Version 1.1; Version 1.6.5.4; Version 1.5.7; Version 1.7.4; Version 1.6.4.1; Version 1.6.5.5; Version 1.7.5.3; Version 1.7.2; Version 1.7.8; Version 1.5.2; Version 1.6.4; Version 1.2; Version 1.4
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a n/a — Versions not specified
  • skyphe file-gallery — Up to and including 1.7.9
  • skyphe file-gallery — Version 1.1
  • skyphe file-gallery — Version 1.2
  • skyphe file-gallery — Version 1.3
  • skyphe file-gallery — Version 1.4
  • skyphe file-gallery — Version 1.5
  • skyphe file-gallery — Version 1.5.1
  • skyphe file-gallery — Version 1.5.2
  • skyphe file-gallery — Version 1.5.3
  • skyphe file-gallery — Version 1.5.4
  • skyphe file-gallery — Version 1.5.5
  • skyphe file-gallery — Version 1.5.6
  • skyphe file-gallery — Version 1.5.7
  • skyphe file-gallery — Version 1.5.8
  • skyphe file-gallery — Version 1.5.9
  • skyphe file-gallery — Version 1.6
  • skyphe file-gallery — Version 1.6.0.1
  • skyphe file-gallery — Version 1.6.2
  • skyphe file-gallery — Version 1.6.3
  • skyphe file-gallery — Version 1.6.4
  • skyphe file-gallery — Version 1.6.4.1
  • skyphe file-gallery — Version 1.6.5
  • skyphe file-gallery — Version 1.6.5.1
  • skyphe file-gallery — Version 1.6.5.2
  • skyphe file-gallery — Version 1.6.5.3
  • skyphe file-gallery — Version 1.6.5.4
  • skyphe file-gallery — Version 1.6.5.5
  • skyphe file-gallery — Version 1.6.5.6
  • skyphe file-gallery — Version 1.6.6
  • skyphe file-gallery — Version 1.7
  • skyphe file-gallery — Version 1.7.1
  • skyphe file-gallery — Version 1.7.2
  • skyphe file-gallery — Version 1.7.3
  • skyphe file-gallery — Version 1.7.4
  • skyphe file-gallery — Version 1.7.4.1
  • skyphe file-gallery — Version 1.7.5
  • skyphe file-gallery — Version 1.7.5.1
  • skyphe file-gallery — Version 1.7.5.3
  • skyphe file-gallery — Version 1.7.6
  • skyphe file-gallery — Version 1.7.7
  • skyphe file-gallery — Version 1.7.8

References