CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Nilesh Shiragave WordPress Gallery Plugin wordpress-gallery-plugin allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin: from n/a through <= 1.4.
Explanation of Vulnerability in Simple Terms
The WordPress Gallery Plugin version 1.4 and earlier is vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the gallery without the admin's knowledge or consent. This can lead to unauthorized changes to gallery settings, content, or configuration.
What an attacker can do
Perform unwanted actions on the gallery by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
Gallery settings or content could be modified without your knowledge if an admin visits a malicious link while logged in.
Conditions required to exploit
Admin must be logged in and visit a page controlled by the attacker; no special plugin configuration required.
Key dates
External resources
Related vulnerabilities
