← Back

Dancoulter

dancoulter

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Flickr Gallery
flickr_gallery
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-20207
1Dancoulter
1Flickr Gallery
Jan 5, 2026
Oct 18, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attack...Show more
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors.Show less