CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 47.3%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2017-20207

Dancoulter » Flickr Gallery » Version: 0.1.0

cpe:2.3:a:dancoulter:flickr_gallery:0.1.0
Dancoulter » Flickr Gallery » Version: 0.1.1

cpe:2.3:a:dancoulter:flickr_gallery:0.1.1
Dancoulter » Flickr Gallery » Version: 0.1.2

cpe:2.3:a:dancoulter:flickr_gallery:0.1.2
Dancoulter » Flickr Gallery » Version: 0.1.3

cpe:2.3:a:dancoulter:flickr_gallery:0.1.3
Dancoulter » Flickr Gallery » Version: 0.2.0

cpe:2.3:a:dancoulter:flickr_gallery:0.2.0
Dancoulter » Flickr Gallery » Version: 0.2.1

cpe:2.3:a:dancoulter:flickr_gallery:0.2.1
Dancoulter » Flickr Gallery » Version: 0.2.2

cpe:2.3:a:dancoulter:flickr_gallery:0.2.2
Dancoulter » Flickr Gallery » Version: 0.3.0

cpe:2.3:a:dancoulter:flickr_gallery:0.3.0
Dancoulter » Flickr Gallery » Version: 0.3.1

cpe:2.3:a:dancoulter:flickr_gallery:0.3.1
Dancoulter » Flickr Gallery » Version: 0.4.0

cpe:2.3:a:dancoulter:flickr_gallery:0.4.0
Dancoulter » Flickr Gallery » Version: 0.4.1

cpe:2.3:a:dancoulter:flickr_gallery:0.4.1
Dancoulter » Flickr Gallery » Version: 0.4.2

cpe:2.3:a:dancoulter:flickr_gallery:0.4.2
Dancoulter » Flickr Gallery » Version: 0.4.3

cpe:2.3:a:dancoulter:flickr_gallery:0.4.3
Dancoulter » Flickr Gallery » Version: 1.0

cpe:2.3:a:dancoulter:flickr_gallery:1.0
Dancoulter » Flickr Gallery » Version: 1.0.1

cpe:2.3:a:dancoulter:flickr_gallery:1.0.1
Dancoulter » Flickr Gallery » Version: 1.1

cpe:2.3:a:dancoulter:flickr_gallery:1.1
Dancoulter » Flickr Gallery » Version: 1.1.1

cpe:2.3:a:dancoulter:flickr_gallery:1.1.1
Dancoulter » Flickr Gallery » Version: 1.1.2

cpe:2.3:a:dancoulter:flickr_gallery:1.1.2
Dancoulter » Flickr Gallery » Version: 1.1.4

cpe:2.3:a:dancoulter:flickr_gallery:1.1.4
Dancoulter » Flickr Gallery » Version: 1.2

cpe:2.3:a:dancoulter:flickr_gallery:1.2
Dancoulter » Flickr Gallery » Version: 1.2.1

cpe:2.3:a:dancoulter:flickr_gallery:1.2.1
Dancoulter » Flickr Gallery » Version: 1.2.2

cpe:2.3:a:dancoulter:flickr_gallery:1.2.2
Dancoulter » Flickr Gallery » Version: 1.2.3

cpe:2.3:a:dancoulter:flickr_gallery:1.2.3
Dancoulter » Flickr Gallery » Version: 1.2.4

cpe:2.3:a:dancoulter:flickr_gallery:1.2.4
Dancoulter » Flickr Gallery » Version: 1.2.5

cpe:2.3:a:dancoulter:flickr_gallery:1.2.5
Dancoulter » Flickr Gallery » Version: 1.2.5.1

cpe:2.3:a:dancoulter:flickr_gallery:1.2.5.1
Dancoulter » Flickr Gallery » Version: 1.2.6

cpe:2.3:a:dancoulter:flickr_gallery:1.2.6
Dancoulter » Flickr Gallery » Version: 1.2.7

cpe:2.3:a:dancoulter:flickr_gallery:1.2.7
Dancoulter » Flickr Gallery » Version: 1.2.8

cpe:2.3:a:dancoulter:flickr_gallery:1.2.8
Dancoulter » Flickr Gallery » Version: 1.2.9

cpe:2.3:a:dancoulter:flickr_gallery:1.2.9
Dancoulter » Flickr Gallery » Version: 1.3.0

cpe:2.3:a:dancoulter:flickr_gallery:1.3.0
Dancoulter » Flickr Gallery » Version: 1.4.0

cpe:2.3:a:dancoulter:flickr_gallery:1.4.0
Dancoulter » Flickr Gallery » Version: 1.5.0

cpe:2.3:a:dancoulter:flickr_gallery:1.5.0
Dancoulter » Flickr Gallery » Version: 1.5.1

cpe:2.3:a:dancoulter:flickr_gallery:1.5.1
Dancoulter » Flickr Gallery » Version: 1.5.2

cpe:2.3:a:dancoulter:flickr_gallery:1.5.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-20207

Products

Pricing

Contact Us