Read the docs
TI-2014-02052 Aliases CVE-2014-2558GHSA-pg2w-hcm2-5fww

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings…

Priority LOW 32CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.

Why it matters now

EPSS 0.01746 77th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 63

CPEVersionsRoleVendor
cpe:2.3:a:skyphe:file-gallery:*:*:*:*:*:wordpress:*:*up to 1.7.9VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.1:*:*:*:*:wordpress:*:*1.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.2:*:*:*:*:wordpress:*:*1.2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.3:*:*:*:*:wordpress:*:*1.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.4:*:*:*:*:wordpress:*:*1.4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5:*:*:*:*:wordpress:*:*1.5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5:a:*:*:*:wordpress:*:*1.5 aVulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5:b:*:*:*:wordpress:*:*1.5 bVulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5:b2:*:*:*:wordpress:*:*1.5 b2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5:b3:*:*:*:wordpress:*:*1.5 b3VulnerableSkyphe
  • cpe:2.3:a:skyphe:file-gallery:*:*:*:*:*:wordpress:*:* Versions up to 1.7.9 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.1:*:*:*:*:wordpress:*:* Versions 1.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.2:*:*:*:*:wordpress:*:* Versions 1.2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.3:*:*:*:*:wordpress:*:* Versions 1.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.4:*:*:*:*:wordpress:*:* Versions 1.4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:*:*:*:*:wordpress:*:* Versions 1.5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:a:*:*:*:wordpress:*:* Versions 1.5 a Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:b:*:*:*:wordpress:*:* Versions 1.5 b Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:b2:*:*:*:wordpress:*:* Versions 1.5 b2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:b3:*:*:*:wordpress:*:* Versions 1.5 b3 Vulnerable ·Skyphe
Show 53 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:skyphe:file-gallery:1.5:rc1:*:*:*:wordpress:*:*1.5 rc1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.1:*:*:*:*:wordpress:*:*1.5.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.2:*:*:*:*:wordpress:*:*1.5.2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.3:*:*:*:*:wordpress:*:*1.5.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.4:*:*:*:*:wordpress:*:*1.5.4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.5:*:*:*:*:wordpress:*:*1.5.5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.6:*:*:*:*:wordpress:*:*1.5.6VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.7:*:*:*:*:wordpress:*:*1.5.7VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.8:-:*:*:*:wordpress:*:*1.5.8VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.8:b1:*:*:*:wordpress:*:*1.5.8 b1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.8:b2:*:*:*:wordpress:*:*1.5.8 b2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.5.9:*:*:*:*:wordpress:*:*1.5.9VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6:*:*:*:*:wordpress:*:*1.6VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.0.1:*:*:*:*:wordpress:*:*1.6.0.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.2:*:*:*:*:wordpress:*:*1.6.2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.3:*:*:*:*:wordpress:*:*1.6.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.4:*:*:*:*:wordpress:*:*1.6.4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.4.1:*:*:*:*:wordpress:*:*1.6.4.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5:*:*:*:*:wordpress:*:*1.6.5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.1:*:*:*:*:wordpress:*:*1.6.5.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.2:*:*:*:*:wordpress:*:*1.6.5.2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.3:*:*:*:*:wordpress:*:*1.6.5.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.4:*:*:*:*:wordpress:*:*1.6.5.4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.5:*:*:*:*:wordpress:*:*1.6.5.5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.5.6:*:*:*:*:wordpress:*:*1.6.5.6VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.6.6:beta:*:*:*:wordpress:*:*1.6.6 betaVulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:-:*:*:*:wordpress:*:*1.7VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc10:*:*:*:wordpress:*:*1.7 rc10VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc11:*:*:*:wordpress:*:*1.7 rc11VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc12:*:*:*:wordpress:*:*1.7 rc12VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc13:*:*:*:wordpress:*:*1.7 rc13VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc14:*:*:*:wordpress:*:*1.7 rc14VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc3:*:*:*:wordpress:*:*1.7 rc3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc4:*:*:*:wordpress:*:*1.7 rc4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc5:*:*:*:wordpress:*:*1.7 rc5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc6:*:*:*:wordpress:*:*1.7 rc6VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc7:*:*:*:wordpress:*:*1.7 rc7VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc8:*:*:*:wordpress:*:*1.7 rc8VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7:rc9:*:*:*:wordpress:*:*1.7 rc9VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.1:*:*:*:*:wordpress:*:*1.7.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.2:*:*:*:*:wordpress:*:*1.7.2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.3:*:*:*:*:wordpress:*:*1.7.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.4:-:*:*:*:wordpress:*:*1.7.4VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.4:rc2:*:*:*:wordpress:*:*1.7.4 rc2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.4.1:*:*:*:*:wordpress:*:*1.7.4.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.5:-:*:*:*:wordpress:*:*1.7.5VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta1:*:*:*:wordpress:*:*1.7.5 beta1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.5:beta2:*:*:*:wordpress:*:*1.7.5 beta2VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.5.1:*:*:*:*:wordpress:*:*1.7.5.1VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.5.3:*:*:*:*:wordpress:*:*1.7.5.3VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.6:*:*:*:*:wordpress:*:*1.7.6VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.7:*:*:*:*:wordpress:*:*1.7.7VulnerableSkyphe
cpe:2.3:a:skyphe:file-gallery:1.7.8:*:*:*:*:wordpress:*:*1.7.8VulnerableSkyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5:rc1:*:*:*:wordpress:*:* Versions 1.5 rc1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.1:*:*:*:*:wordpress:*:* Versions 1.5.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.2:*:*:*:*:wordpress:*:* Versions 1.5.2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.3:*:*:*:*:wordpress:*:* Versions 1.5.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.4:*:*:*:*:wordpress:*:* Versions 1.5.4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.5:*:*:*:*:wordpress:*:* Versions 1.5.5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.6:*:*:*:*:wordpress:*:* Versions 1.5.6 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.7:*:*:*:*:wordpress:*:* Versions 1.5.7 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.8:-:*:*:*:wordpress:*:* Versions 1.5.8 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.8:b1:*:*:*:wordpress:*:* Versions 1.5.8 b1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.8:b2:*:*:*:wordpress:*:* Versions 1.5.8 b2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.5.9:*:*:*:*:wordpress:*:* Versions 1.5.9 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6:*:*:*:*:wordpress:*:* Versions 1.6 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.0.1:*:*:*:*:wordpress:*:* Versions 1.6.0.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.2:*:*:*:*:wordpress:*:* Versions 1.6.2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.3:*:*:*:*:wordpress:*:* Versions 1.6.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.4:*:*:*:*:wordpress:*:* Versions 1.6.4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.4.1:*:*:*:*:wordpress:*:* Versions 1.6.4.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5:*:*:*:*:wordpress:*:* Versions 1.6.5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.1:*:*:*:*:wordpress:*:* Versions 1.6.5.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.2:*:*:*:*:wordpress:*:* Versions 1.6.5.2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.3:*:*:*:*:wordpress:*:* Versions 1.6.5.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.4:*:*:*:*:wordpress:*:* Versions 1.6.5.4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.5:*:*:*:*:wordpress:*:* Versions 1.6.5.5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.5.6:*:*:*:*:wordpress:*:* Versions 1.6.5.6 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.6.6:beta:*:*:*:wordpress:*:* Versions 1.6.6 beta Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:-:*:*:*:wordpress:*:* Versions 1.7 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc10:*:*:*:wordpress:*:* Versions 1.7 rc10 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc11:*:*:*:wordpress:*:* Versions 1.7 rc11 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc12:*:*:*:wordpress:*:* Versions 1.7 rc12 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc13:*:*:*:wordpress:*:* Versions 1.7 rc13 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc14:*:*:*:wordpress:*:* Versions 1.7 rc14 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc3:*:*:*:wordpress:*:* Versions 1.7 rc3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc4:*:*:*:wordpress:*:* Versions 1.7 rc4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc5:*:*:*:wordpress:*:* Versions 1.7 rc5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc6:*:*:*:wordpress:*:* Versions 1.7 rc6 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc7:*:*:*:wordpress:*:* Versions 1.7 rc7 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc8:*:*:*:wordpress:*:* Versions 1.7 rc8 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7:rc9:*:*:*:wordpress:*:* Versions 1.7 rc9 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.1:*:*:*:*:wordpress:*:* Versions 1.7.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.2:*:*:*:*:wordpress:*:* Versions 1.7.2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.3:*:*:*:*:wordpress:*:* Versions 1.7.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.4:-:*:*:*:wordpress:*:* Versions 1.7.4 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.4:rc2:*:*:*:wordpress:*:* Versions 1.7.4 rc2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.4.1:*:*:*:*:wordpress:*:* Versions 1.7.4.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.5:-:*:*:*:wordpress:*:* Versions 1.7.5 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.5:beta1:*:*:*:wordpress:*:* Versions 1.7.5 beta1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.5:beta2:*:*:*:wordpress:*:* Versions 1.7.5 beta2 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.5.1:*:*:*:*:wordpress:*:* Versions 1.7.5.1 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.5.3:*:*:*:*:wordpress:*:* Versions 1.7.5.3 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.6:*:*:*:*:wordpress:*:* Versions 1.7.6 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.7:*:*:*:*:wordpress:*:* Versions 1.7.7 Vulnerable ·Skyphe
  • cpe:2.3:a:skyphe:file-gallery:1.7.8:*:*:*:*:wordpress:*:* Versions 1.7.8 Vulnerable ·Skyphe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-2558
  2. 2026-10-03 Alias added: GHSA-pg2w-hcm2-5fww

References

Exploit 1

Patch 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences