Vulnerability · Published Jun 17, 2025 · Assigned by Patchstack

CVE-2025-49451WordPress Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery plugin <= 1.0.13 - Directory Traversal Vulnerability

High 7.5

In plain English

A high-severity security flaw in Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery from yannisraft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 55.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery aeroscroll-gallery allows Path Traversal.This issue affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery: from n/a through <= 1.0.13.

Affected products (as reported)

Vendor	Product	Versions
yannisraft	Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery	0 – through 1.0.13

Weakness: CWE-35 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://patchstack.com/database/Wordpress/Plugin/aeroscroll-gallery/vulnerability/wordpress-aeroscroll-gallery-infinite-scroll-image-gallery-post-grid-with-photo-gallery-1-0-12-directory-traversal-vulnerability?_s_id=cve vdb-entry