CVE-2024-9824

🗓️ 12 Oct 2024 05:39:39Reported by WordfenceType

The ImagePress plugin for WordPress allows unauthorized modification and data loss due to missing capability checks, enabling authenticated attackers to delete arbitrary posts and update post titles

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9824	12 Oct 202408:37	–	circl
CNNVD	WordPress plugin ImagePress 安全漏洞	12 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-9824 ImagePress - Image Gallery <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update	12 Oct 202405:39	–	cvelist
EUVD	EUVD-2024-50145	3 Oct 202520:07	–	euvd
NVD	CVE-2024-9824	12 Oct 202406:15	–	nvd
Patchstack	WordPress ImagePress plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update vulnerability	14 Oct 202400:28	–	patchstack
Patchstack	WordPress ImagePress Plugin <= 1.2.2 is vulnerable to Broken Access Control	14 Oct 202400:00	–	patchstack
Positive Technologies	PT-2024-39868 · WordPress · The Imagepress – Image Gallery	12 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9824	23 May 202510:44	–	redhatcve
Vulnrichment	CVE-2024-9824 ImagePress - Image Gallery <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update	12 Oct 202405:39	–	vulnrichment

Vulners

Node

butterflymedia imagepress_image_galleryRange≤1.2.2wordpress

[
  {
    "vendor": "butterflymedia",
    "product": "ImagePress – Image Gallery",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3bce6872-34d4-4675-bce9-e1197d801bce
plugins	www.plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/functions.php
plugins	www.plugins.trac.wordpress.org/browser/image-gallery/trunk/includes/functions.php
plugins	www.plugins.trac.wordpress.org/changeset/3167164/

15 Apr 2026 00:35Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.3

EPSS0.00147

SSVC

CWE-862