CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme visual-arts allows Object Injection.This issue affects Visual Art | Gallery WordPress Theme: from n/a through <= 2.4.
Explanation of Vulnerability in Simple Terms
The Visual Art | Gallery WordPress theme versions 2.4 and earlier contain a deserialization vulnerability in how they process untrusted data. An authenticated attacker with low privileges can exploit this to read sensitive site data, modify content, or disrupt site availability. Sites running affected versions should update immediately.
What an attacker can do
Read sensitive data, modify site content, or crash the site.
Potential impact on your site
Attackers with basic WordPress access can compromise your site's data integrity and availability.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
