CVE-2015-7527: Cool Video Gallery Project Cool Video Gallery

High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days.

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

Affected products

Published 2015-12-17. Last modified 2026-06-17.