PT-2026-95919 · WordPress · Photo Gallery
CVSS v3.1
3.1
Low
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Photo Gallery, Sliders, Proofing and WordPress plugin versions prior to 4.5.0
Description
The plugin fails to verify if a user possesses the required options capability before saving image sizing settings. This allows users who have only been granted the
gallery-management capability by an administrator to modify settings that affect the entire site.Recommendations
Update the plugin to version 4.5.0 or later.
Exploit
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Photo Gallery