CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
What the vulnerability does
Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through <= 1.0.7.
Explanation of Vulnerability in Simple Terms
The Image Gallery block plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify or delete gallery data without proper permission checks. An attacker with a basic user account can disrupt site galleries or alter their content. The vulnerability affects versions up to 1.0.7 and requires a valid WordPress login to exploit.
What an attacker can do
Modify or delete image galleries and their content without proper authorization.
Potential impact on your site
Galleries can be altered or deleted by any logged-in user, risking data loss and site defacement.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Subscriber or Contributor).
Key dates
External resources
Related vulnerabilities
