Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-14798: 10Web Photo Gallery plugin lets logged‑in users read files

CVE-2019-14798 · published 7 years ago

Summary

The 10Web Photo Gallery add‑on for WordPress (versions before 1.5.25) can be tricked by an authenticated user to retrieve files from the server using a specially crafted request. This could expose sensitive information stored on the site. Update the plugin to the latest version or remove it if not needed.

What to do

Update 10web photo_gallery to version 1.5.25 or later.

Affected software

Vendor	Product	Affected versions
10web	photo_gallery	< 1.5.25 `cpe:2.3:a:10web:photo_gallery::::::wordpress::*`

Original advisory text

The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter.

References

https://wordpress.org/plugins/photo-gallery/#developers Third Party Advisory
https://wpvulndb.com/vulnerabilities/9361 Third Party Advisory
https://www.pluginvulnerabilities.com/2019/05/14/authenticated-local-file-inclus... Exploit Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.9 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published9 Aug 2019

Updated24 Oct 2026

First seen29 Sep 2026

Sources

CVE-2019-14798 · NVD

Track software like this

Free during beta