CVE-2023-2562

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refreshmetabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post...

CVE-2023-2561

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the galleryremove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with th...

CVE-2023-2562

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refreshmetabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post...

CVE-2023-2561

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the galleryremove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with th...

Design/Logic Flaw

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the galleryremove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with th...

Design/Logic Flaw

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refreshmetabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post...

CVE-2023-2561

CVE-2023-2561 affects the WordPress plugin Gallery Metabox (versions

CVE-2023-2562

CVE-2023-2562 affects Gallery Metabox for WordPress. The vulnerability is a missing capability check in refresh_metabox that, in versions up to 1.5, allows subscriber-level users to obtain a list of images attached to a post. The CVE entry notes unauthorized data access as the impact; no exploita...

CVE-2023-2562 Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refreshmetabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post...

WordPress Plugin Gallery Metabox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin Gallery Metabox 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-20193 · WordPress · The Gallery Metabox

Name of the Vulnerable Software and Affected Versions: The Gallery Metabox for WordPress versions up to, and including, 1.5 Description: The issue allows unauthorized modification of data due to a missing capability check on the gallery remove function. This makes it possible for attackers with...

CVE-2023-37152

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability...

Projectworlds Online Art gallery project 代码问题漏洞

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. A code issue vulnerability exists in Projectworlds Online Art Gallery Project version 1.0. An attacker can exploit this vulnerability to perform arbitrary file uploads via the adminHome.php page...

PT-2023-25810 · Unknown · Projectworlds Online Art Gallery Project

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Art Gallery Project version 1.0 Description: The issue allows unauthenticated users to perform arbitrary file uploads via the "adminHome.php" page. However, it is noted that the validity of this issue has been disputed...

CVE-2023-37152

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability...

CVE-2023-37152

CVE-2023-37152 concerns Projectworlds Online Art Gallery Project 1.0. Multiple sources report an unauthenticated arbitrary file-upload flaw via adminHome.php, describing a code issue that lets attackers upload arbitrary files (potential impact as stated). The vulnerability is disputed in some ent...

CVE-2023-37270

Summary: CVE-2023-37270 affects Piwigo prior to 13.8.0, with a SQL Injection in the administrator login flow where the User-Agent related query is vulnerable at the endpoint recording user information. The vulnerability can be exploited by an authenticated attacker (admin screen login with low pr...

CVE-2023-3538

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 ...

CVE-2023-3538

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 ...