CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.
Explanation of Vulnerability in Simple Terms
The Responsive Image Gallery and Gallery Album plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to modify gallery data. An attacker with a basic user account can alter gallery settings and content without proper permission validation. This affects versions up to 2.0.3. Update to a version newer than 2.0.3 to resolve the issue.
What an attacker can do
Modify gallery settings and content without proper authorization checks.
Potential impact on your site
Unauthorized users can alter your gallery content, settings, and potentially deface or corrupt image galleries on your site.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Subscriber or Contributor role).
Key dates
External resources
Related vulnerabilities
