Lucene search
PRIOn knowledge basePRION:CVE-2023-6742HistoryJan 11, 2024 - 9:15 a.m.
Input validation
2024-01-1109:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
plugin
vulnerability
data modification
capability check
authenticated attackers
contributor access
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the ‘envira_gallery_insert_images’ function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated attackers, with contributor access and above, to modify galleries on other users’ posts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| envira_gallery | le | 1.8.7.1 |
Related
cve
cve
CVE-2023-6742
2024-01-11 09:15:51
cvelist
cvelist
CVE-2023-6742
2024-01-11 08:32:32
nvd
nvd
CVE-2023-6742
2024-01-11 09:15:51
wpvulndb
wpvulndb
wordfence
wordfence