CVE-2021-4384

Summary: CVE-2021-4384 affects the WordPress Photo Gallery – Image Gallery plugin for WordPress. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation in load_images_thumbnail() and edit_gallery() functions, allowing unauthenticated attackers to edit galleries via forge...