CVE-2013-5962

no score yetEPSS 15%

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2013-09-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

envato:complete_gallery_manager_plugin

References

http://archives.neohapsis.com/archives/bugtraq/2013-09/0090.html
http://codecanyon.net/item/complete-gallery-manager-for-wordpress/2418606
http://packetstormsecurity.com/files/123303
http://secunia.com/advisories/54894
http://www.exploit-db.com/exploits/28377

Check your stack JSON