WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Robo Gallery Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.11 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-45804 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e6bf3616006d Credits István Márton Require...

Robo Gallery <= 3.2.11 - Cross-Site Request Forgery

The plugin does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks. The original researcher didn't provide enough information on which actions could be performed...

WordPress Robo Gallery Plugin <= 3.2.11 is vulnerable to Cross Site Request Forgery (CSRF)

Software Robo Gallery Type Plugin Vulnerable versions = 3.2.11 Fixed in 3.2.12 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24414 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7c1909b9ba2f Credits thiennv Required...

WordPress Robo Gallery 3.2.1 plugin - XSS Stored Vulnerability

Title: WordPress 6.0.1 Plugin-Robo Gallery 3.2.1 XSS-Stored Author: nu11secur1ty Vendor: https://wordpress.org/ Software: https://wordpress.org/plugins/robo-gallery/ Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/RoboGallery/XSS-Stored Description: Th...

WordPress Robo Gallery 3.2.1 plugin - Bypass POST comment approvement Vulnerability

Title: WordPress 6.0 - Bypass POST comment approvement Robo Gallery 3.2.1 Author: nu11secur1ty Vendor: https://wordpress.org/ Software: https://wordpress.org/plugins/robo-gallery/ Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/RoboGallery Description:...

WordPress plugin Robo Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Robo Gallery plugin <= 2.0.15 - Privilege Escalation Vulnerability

WordPress Robo Gallery plugin Privilege Escalation Vulnerability exists in 2.0.15 version. It doesn't check if the current user is administrator so any logged in user can reset allery’s view count. Solution Update the plugin...

Wordpress Robo Gallery Code Execution Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code execution vulnerability exists in Wordpress Robo Gallery. Due to the 'rbsgalleryajax.php' file GET...

WordPress Robo Gallery Plugin remote Code Execution

A code execution vulnerability exists in WordPress Robo Gallery Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress Robo Gallery 2.0.14 Code Execution

No description provided by source...

WordPress Robo Gallery Plugin <= 2.0.14 - Remote Code Execution

This plugin is prone to a remote code execution vulnerability. It allows the attackers to execute own malicious php commands to compromise the web-application or connected dbms. Solution Update the plugin...

Robo Gallery <= 2.0.14 - Remote Code Execution

This is potentially a False Positive. Needs further investigation...

WordPress Robo Gallery 2.0.14 Code Execution

Document Title: =============== Wordpress Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID:...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 182...