4.3
Moyenne
CVE-2023-6742 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
Description
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'envira_gallery_insert_images' function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated attackers, with contributor access and above, to modify galleries on other users' posts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gallery Plugin for WordPress – Envira Photo Gallery 1.8 | premières → 1.8.7.2 | Pas de correctif indiqué |
| Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 1.8 | premières → 1.8.7.2 | Pas de correctif indiqué |
Autres CVE de Gallery Plugin for WordPress – Envira Photo Gallery
Les 4 CVE de Gallery Plugin for WordPress – Envira Photo Gallery →
CVE-2025-12377
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
4.3
Moyenne
CVE-2025-11448
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
4.3
Moyenne
CVE-2024-5020
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
6.4
Moyenne