GCVE - cpe:2.3:a:reflex_gallery_project:reflex_gallery:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:reflex_gallery_project:reflex_gallery:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Reflex Gallery Project (`4342d2d9-47b4-55dd-94f0-1ceecc2e6aa1`)
Product	Reflex Gallery (`e797b2c1-6a0c-548c-aaa6-60a8d1abc255`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-4133`	vulnerable	2026-06-08 05:06:39.224497	Details available Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory. Published: 2015-05-28T14:00:00.000Z Updated: 2024-08-06T06:04:02.831Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/130845/ http://packetstormsecurity.com/files/131515/ https://wpvulndb.com/vulnerabilities/7867 https://www.exploit-db.com/exploits/36809/ http://osvdb.org/show/osvdb/88853	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7482`	vulnerable	2026-06-08 05:05:10.439820	Details available The reflex-gallery plugin before 1.4.3 for WordPress has XSS. Published: 2019-08-22T13:12:14.000Z Updated: 2024-08-06T18:09:16.992Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/reflex-gallery/#developers	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.