What’s Vulnerable › Vulnerabilities

CVE-2014-8491

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-18 · updated 2026-06-17
• Weakness: CWE-200

Description

The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banner_widget_default/gallery.php.

Affected products

• Album and Image Gallery with Lightbox – Flagallery Photo Portfolio: through 4.24

References

• https://g0blin.co.uk/cve-2014-8491/
• https://wpvulndb.com/vulnerabilities/8238
• https://g0blin.co.uk/cve-2014-8491/
• https://wpvulndb.com/vulnerabilities/8238

Get alerted when CVE-2014-8491 or the next vulnerability affects your stack