Lucene search

[email protected]CVE-2023-6742

HistoryJan 11, 2024 - 9:15 a.m.

CVE-2023-6742

2024-01-1109:15:51

CWE-754

[email protected]

web.nvd.nist.gov

wordpress

gallery plugin

envira photo gallery

vulnerability

unauthorized modification

data breach

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

19.9%

JSON

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the ‘envira_gallery_insert_images’ function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated attackers, with contributor access and above, to modify galleries on other users’ posts.

CPENameOperatorVersion
enviragallery:envira_galleryenviragallery envira galleryle1.8.7.1
enviragallery:envira_galleryenviragallery envira galleryeq1.2.9
enviragallery:envira_galleryenviragallery envira galleryeq1.0.9
enviragallery:envira_galleryenviragallery envira galleryeq1.1.3
enviragallery:envira_galleryenviragallery envira galleryeq1.5.0.4
enviragallery:envira_galleryenviragallery envira galleryeq1.7.8.1
enviragallery:envira_galleryenviragallery envira galleryeq1.8.0.2
enviragallery:envira_galleryenviragallery envira galleryeq1.2.4
enviragallery:envira_galleryenviragallery envira galleryeq1.3.1
enviragallery:envira_galleryenviragallery envira galleryeq1.2.6

CPE	Name	Operator	Version
enviragallery:envira_gallery	enviragallery envira gallery	le	1.8.7.1
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.2.9
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.0.9
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.1.3
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.5.0.4
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.7.8.1
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.8.0.2
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.2.4
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.3.1
enviragallery:envira_gallery	enviragallery envira gallery	eq	1.2.6

Rows per page:

1-10 of 1321

References

plugins.trac.wordpress.org/browser/envira-gallery-lite/trunk/includes/admin/ajax.php

plugins.trac.wordpress.org/changeset/3017115/envira-gallery-lite/tags/1.8.7.3/includes/admin/ajax.php

www.wordfence.com/threat-intel/vulnerabilities/id/40655278-6915-4a76-ac2d-bb161d3cee92?source=cve

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

6.9 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

19.9%

JSON

Related for CVE-2023-6742

prion1 wpvulndb1 cvelist1 wordfence1