CVE-2015-7527
cool video gallery project cool video gallery: no CVSS score yet. EPSS 5.2% chance of exploitation in the next 30 days.
lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.
- EPSS
- 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cool_video_gallery_project:cool_video_gallery
References
- http://packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html
- http://www.openwall.com/lists/oss-security/2015/12/02/9
- http://www.securityfocus.com/archive/1/537051/100/0/threaded
- http://www.vapidlabs.com/advisory.php?v=158
- https://wordpress.org/support/topic/command-injection-vulnerability-in-v19