CVE-2022-2224

🗓️ 18 Jul 2022 16:18:58Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 64 Views🌐 WEB

WordPress plugin Gallery for Social Photo, version 1.0.0.27 CSRF vulnerabilit

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-2224	18 Jul 202217:15	–	attackerkb
Circl	CVE-2022-2224	18 Jul 202220:39	–	circl
CNNVD	WordPress plugin Gallery for Social Photo 跨站请求伪造漏洞	18 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-2224 Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication	18 Jul 202216:18	–	cvelist
EUVD	EUVD-2022-34504	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2224	18 Jul 202217:15	–	nvd
OSV	CVE-2022-2224	18 Jul 202217:15	–	osv
Patchstack	WordPress Gallery for Social Photo <= 1.0.0.29 - Cross-Site Request Forgery (CSRF) vulnerability leading to Post Duplication	1 Jul 202200:00	–	patchstack
Prion	Cross site request forgery (csrf)	18 Jul 202217:15	–	prion
Positive Technologies	PT-2022-15298 · Gallery · Gallery	18 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

ghozylab gallery_for_social_photoRange≤1.0.0.27wordpress

[
  {
    "vendor": "ghozylab",
    "product": "Gallery for Social Photo",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.0.27",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c6683edc-8c77-446c-bd7e-e97b8c5d0c57
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/vulnerability-advisories/

Parameter	Position	Path	Description	CWE
action	query param	/wp-admin/admin-ajax.php	CSRF vulnerability in Gallery for Social Photo plugin allows duplicating posts via crafted request to admin-ajax.php?action=gifeed_duplicate_feed exploiting missing nonce check	CWE-352
post	query param	/wp-admin/admin-ajax.php	CSRF vulnerability in Gallery for Social Photo plugin allows duplicating posts via crafted request to admin-ajax.php?action=gifeed_duplicate_feed exploiting missing nonce check	CWE-352

17 Jun 2026 04:41Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.14.3 - 5.4

EPSS0.00342

CWE-352