CVE-2015-5682

7.5 highEPSS 1.9%

High (7.5) in powerplay gallery project powerplay gallery. EPSS 1.9% chance of exploitation in the next 30 days.

upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-05-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

powerplay_gallery_project:powerplay_gallery

References

http://www.openwall.com/lists/oss-security/2015/07/27/8
http://www.vapid.dhs.org/advisory.php?v=132
http://www.openwall.com/lists/oss-security/2015/07/27/8
http://www.vapid.dhs.org/advisory.php?v=132

Check your stack JSON