CVE-2024-3632

The Smart Image Gallery WordPress plugin versions prior to 1.0.19 are vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks when updating plugin settings, which could allow an attacker to trick a logged-in administrator into making unauthorized changes, such ...