CVE-2024-0221
published 2024-02-05CVE-2024-0221: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including…
PriorityP343high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.31%
67.1th percentile
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the rename_item function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead to site takeovers if the wp-config.php file of a site can be renamed. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery management permissions to lower level users, which might make this exploitable by users as low as contributors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| 10web | photo_gallery | < 1.8.20 | 1.8.20 |
| 10web | photo_gallery_by_10web_mobile-friendly_image_gallery | <= 1.8.19 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
10Web Photo Gallery Plugin up to 1.8.19 on WordPress File Rename path traversal
vuldb·2026-04-11·CVSS 9.1
CVE-2024-0221 [CRITICAL] 10Web Photo Gallery Plugin up to 1.8.19 on WordPress File Rename path traversal
A vulnerability marked as critical has been reported in 10Web Photo Gallery Plugin up to 1.8.19 on WordPress. This affects an unknown part of the component File Rename Handler. This manipulation causes path traversal.
This vulnerability is registered as CVE-2024-0221. The attack requires access to the local network. No exploit is available.
GHSA
GHSA-rpjv-hwjc-55jj: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includ
ghsa_unreviewed·2024-02-06
CVE-2024-0221 [CRITICAL] CWE-22 GHSA-rpjv-hwjc-55jj: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includ
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the rename_item function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead to site takeovers if the wp-config.php file of a site can be renamed. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery management permissions to lower level users, which might make this exploitable by users as low as contributors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L291https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L441https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3022981%40photo-gallery%2Ftrunk&old=3013021%40photo-gallery%2Ftrunk&sfp_email=&sfph_mail=https://www.wordfence.com/threat-intel/vulnerabilities/id/3a3b8f32-f29d-4e67-8fad-202bfc8a9918?source=cvehttps://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L291https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L441https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3022981%40photo-gallery%2Ftrunk&old=3013021%40photo-gallery%2Ftrunk&sfp_email=&sfph_mail=https://www.wordfence.com/threat-intel/vulnerabilities/id/3a3b8f32-f29d-4e67-8fad-202bfc8a9918?source=cve
2024-02-05
Published