Galleria <= 1.0.3 - Cross-Site Request Forgery

2023-06-1600:00:00

wpscan.com

galleria

plugin

csrf

vulnerability

0.0005 Low

EPSS

Percentile

18.0%

The plugin does not properly verify requests use nonces, leading to a potential Cross-Site Request Forgery (CSRF) vulnerability.

CPENameOperatorVersion
galleriaeq*

CPE	Name	Operator	Version
	galleria	eq	*

References

patchstack.com/database/vulnerability/galleria/wordpress-galleria-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability

0.0005 Low

EPSS

Percentile

18.0%

Related for WPVDB-ID:3992D73A-04EF-4D33-8313-76F5A6C9BB63