4.3
Moyenne
CVE-2024-8431 The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data…
Description
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve private post titles.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Photo Gallery, Images, Slider in Rbs Image Gallery 3.2 | premières → 3.2.21 | Pas de correctif indiqué |
| Robo Gallery – Photo & Image Slider 3.2 | premières → 3.2.21 | Pas de correctif indiqué |
Autres CVE de Photo Gallery, Images, Slider in Rbs Image Gallery
Les 9 CVE de Photo Gallery, Images, Slider in Rbs Image Gallery →
CVE-2024-5647
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
6.4
Moyenne
CVE-2024-3896
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Moyenne
CVE-2024-3894
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Moyenne
CVE-2024-5343
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request…
8.8
Élevée