CVE-2023-1427: medium-severity vulnerability in Photo Gallery by 10Web
Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 0.8%
- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Unknown · Photo Gallery by 10WebRelated CVEs — Photo Gallery by 10Web
In the same product, most dangerous first.
CVE-2021-24139—Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionEPSS 5.5%CVE-2024-10704MEDIUMPhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSSEPSS 0.4%CVE-2024-5968MEDIUMPhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSEPSS 0.4%CVE-2024-8670MEDIUMPhoto Gallery by 10Web < 1.8.29 - Admin+ Stored XSSEPSS 0.4%CVE-2025-0613MEDIUMPhoto Gallery < 1.8.34 - Unauthenticated Stored XSSEPSS 0.3%CVE-2026-12865HIGHPhoto Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged ParametersEPSS 0.3%