CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emd_form_builder_lite_submit_form function in all versions up to, and including, 3.3.6. This makes it possible for unauthenticated attackers to create arbitrary posts or pages.
Explanation of Vulnerability in Simple Terms
Video Gallery – YouTube Gallery & Responsive Video Playlist versions 3.3.6 and earlier lack proper authorization checks. An attacker can modify video gallery content without authentication. The vulnerability affects the plugin's core functionality and allows unauthorized changes to site content through network requests.
What an attacker can do
Modify or delete video gallery content without logging in.
Potential impact on your site
Attackers can alter or remove video galleries, disrupting site content and user experience.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
