CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Album and Image Gallery plus Lightbox: from n/a through 1.6.2.
Explanation of Vulnerability in Simple Terms
The Album and Image Gallery plus Lightbox plugin for WordPress does not properly check user permissions before allowing modifications to gallery content. An attacker without authentication can alter or delete gallery data through direct requests. The vulnerability affects versions up to 1.6.2 and requires no user interaction to exploit.
What an attacker can do
Modify or delete gallery images and settings without logging in.
Potential impact on your site
Attackers can deface or remove gallery content without your knowledge or permission.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
