Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Fastw3b LLC Clear all filters
TI-2025-31462 CVE-2025-49414 · GHSA-q3pf-49mg-xgv4

WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Using Malicious Files.This issue affects FW Gallery: from n/a through <= 8.0.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00397 Published 2025-07-04 No fix listed CWE-434
TI-2025-31464 CVE-2025-49416 · GHSA-2346-xh2v-3jjh

WordPress FW Gallery plugin <= 8.0.0 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fastw3b LLC FW Gallery fw-gallery allows PHP Local File Inclusion.This issue affects FW Gallery: fr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-31463 CVE-2025-49415 · GHSA-pgfv-xw3p-rg8v

WordPress FW Gallery plugin <= 8.0.0 - Arbitrary File Deletion Vulnerability

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Gallery fw-gallery allows Path Traversal.This issue affects FW Gallery: from n/a through <= 8.0.0.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00473 Published 2025-06-17 No fix listed CWE-22