Is CVE-2012-20002 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2012-20002 being exploited in the wild.

How severe is CVE-2012-20002?

High severity, with a CVSS score of 7.5, published 20 October 2026.

Which products and versions are affected?

TinyMCE Thumbnail Gallery before 1.1.0.

Is there a fix for CVE-2012-20002?

Yes: fixed in 1.1.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2012-20002 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2012-20002?

Check whether you run TinyMCE Thumbnail Gallery at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2012-20002: TinyMCE Thumbnail Gallery path traversal file read

CVE-2012-20002 · Severity: high · CVSS 7.5 · Published 2026-10-20

The TinyMCE Thumbnail Gallery plugin for WordPress, used to manage image galleries in the editor, contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files on the server. An attacker can retrieve sensitive files like database configuration files containing credentials by manipulating file paths through a web request.

Vendors: TinyMCE.

Quick answers

Is CVE-2012-20002 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2012-20002 being exploited in the wild.
How severe is CVE-2012-20002?: High severity, with a CVSS score of 7.5, published 20 October 2026.
Which products and versions are affected?: TinyMCE Thumbnail Gallery before 1.1.0.
Is there a fix for CVE-2012-20002?: Yes: fixed in 1.1.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2012-20002 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2012-20002?: Check whether you run TinyMCE Thumbnail Gallery at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 1.1.0

Technical details

A path traversal vulnerability in the download-image.php file permits unauthenticated attackers to traverse the server filesystem and retrieve arbitrary files via the href parameter. By crafting requests with sequences like ../../../../wp-config.php, an attacker can access system files including database credentials. The vulnerability is accessible remotely without authentication or user interaction.

Affected products

TinyMCE Thumbnail Gallery before 1.1.0

Timeline

2023-10-19: disclosed: Exploitation observed by Shadowserver Foundation
2026-10-20: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.