pluginus Vulnerabilities and Affected Products
Vulnerabilities associated with inpost_gallery.
Products
Clear product- husky_-_products_filter_professional_for_woocommerce5 vulnerabilities
- wordpress_meta_data_and_taxonomies_filter4 vulnerabilities
- woot3 vulnerabilities
- wordpress_currency_switcher2 vulnerabilities
- fox_-_currency_switcher_professional_for_woocommerce1 vulnerability
- HUSKY – Products Filter for WooCommerce (formerly WOOF)1 vulnerability
- inpost_gallery1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-4063CRITICAL | InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCEThe InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers. | CVSS9.8v3.1 | EPSS9.52% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |