CVE-2024-0221

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the rename_item function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead to site takeovers if the wp-config.php file of a site can be renamed. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery management permissions to lower level users, which might make this exploitable by users as low as contributors.

• CWE-22
• CWE-22

• https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L291Issue Tracking
• https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L441Issue Tracking
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3022981%40photo-gallery%2Ftrunk&old=3013021%40photo-gallery%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3a3b8f32-f29d-4e67-8fad-202bfc8a9918?source=cvePatch, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L291Issue Tracking
• https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L441Issue Tracking
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3022981%40photo-gallery%2Ftrunk&old=3013021%40photo-gallery%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3a3b8f32-f29d-4e67-8fad-202bfc8a9918?source=cvePatch, Third Party Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0213 A buffer overflow vulnerability in TA for Linux and TA for …7.8
• CVE-2024-0216The Google Doc Embedder plugin for WordPress is vulnerable t…6.4
• CVE-2024-0217A use-after-free flaw was found in PackageKitd. In some cond…3.3
• CVE-2024-0218A Denial of Service (Dos) vulnerability in Nozomi Networks G…8.2
• CVE-2024-0219In Telerik JustDecompile versions prior to 2024 R1, a privil…7.8
• CVE-2024-0220B&R Automation Studio Upgrade Service and B&R Technology Gua…8.1
• CVE-2024-0222Use after free in ANGLE in Google Chrome prior to 120.0.6099…8.8
• CVE-2024-0223Heap buffer overflow in ANGLE in Google Chrome prior to 120.…8.8
• CVE-2024-0224Use after free in WebAudio in Google Chrome prior to 120.0.6…8.8
• CVE-2024-0225Use after free in WebGPU in Google Chrome prior to 120.0.609…8.8
• CVE-2024-0226Synopsys Seeker versions prior to 2023.12.0 are vulnerable t…5.4
• CVE-2024-0227Rejected reason: This CVE ID has been rejected or withdrawn …