4.3
Medium
CVE-2024-8431 The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data…
Description
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve private post titles.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Photo Gallery, Images, Slider in Rbs Image Gallery 3.2 | earliest → 3.2.21 | No fix stated |
| Robo Gallery – Photo & Image Slider 3.2 | earliest → 3.2.21 | No fix stated |
Other CVEs of Photo Gallery, Images, Slider in Rbs Image Gallery
The 9 CVEs of Photo Gallery, Images, Slider in Rbs Image Gallery →
CVE-2024-5647
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
6.4
Medium
CVE-2024-3896
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Medium
CVE-2024-3894
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Medium
CVE-2024-5343
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request…
8.8
High