← Back

Powerplay Gallery Project

powerplay_gallery_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Powerplay Gallery
powerplay_gallery
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5682
1Powerplay Gallery Project
1Powerplay Gallery
May 13, 2026
May 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.
CVE-2015-5599
1Powerplay Gallery Project
1Powerplay Gallery
May 6, 2026
Aug 18, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.