Lucene search

K
wpvulndbWpvulndbWPVDB-ID:FCA4CC02-44F3-4BD2-B320-43C0C052E6D1
HistoryNov 23, 2023 - 12:00 a.m.

Responsive Image Gallery, Gallery Album <= 2.0.3 - Missing Authorization via Multiple AJAX Actions

2023-11-2300:00:00
wpscan.com
1
wordpress
ajax
vulnerability
unauthorized access

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Description The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to missing capability checks on multiple AJAX functions in versions up to, and including, 2.0.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to e.g. create galleries, delete galleries, rename albums, delete albums, and more.

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

Related for WPVDB-ID:FCA4CC02-44F3-4BD2-B320-43C0C052E6D1