CVE-2023-2561

Name of the Vulnerable Software and Affected Versions The Gallery Metabox for WordPress versions up to, and including, 1.5

Description The issue allows unauthorized modification of data due to a missing capability check on the gallery remove function. This makes it possible for attackers with subscriber-level access to modify galleries attached to posts and pages with this plugin.

Recommendations For versions up to, and including, 1.5, update to a version that includes a fix for the missing capability check in the gallery remove function.