Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Limb Image Gallery plugin allows uploading malicious files

CVE-2024-49260 · published 2 years ago
Summary

The Limb Image Gallery plugin for WordPress (versions up to 1.5.7) lets anyone upload files of any type, including those that can run code on your site. This can let an attacker place harmful scripts that could take control of the website or steal data. Update the plugin to a fixed version or remove it if you cannot upgrade, and restrict file uploads to trusted formats.

Original advisory text
Unrestricted Upload of File with Dangerous Type vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery allows Code Injection.This issue affects WordPress Gallery Plugi...
Unrestricted Upload of File with Dangerous Type vulnerability in Limbcode WordPress Gallery Plugin – Limb Image Gallery limb-gallery allows Code Injection.This issue affects WordPress Gallery Plugin – Limb Image Gallery: from n/a through <= 1.5.7.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-434Unrestricted File Upload
Timeline
Published16 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-49260 · NVD
Track software like this
Free during beta