Skip to main content

Gallery Metabox

2 CVEs product

Monthly

CVE-2023-2562 Jul 12, 05:15 MEDIUM This Month

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Gallery Metabox Wordpress Plugin Gallery Metabox Project
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2023-2561 Jul 12, 05:15 MEDIUM This Month

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versions up to, and including, 1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Gallery Metabox Wordpress Plugin Gallery Metabox Project
NVD
CVSS 3.1
4.3
EPSS
0.1%
EPSS 0% CVSS 4.3
MEDIUM This Month

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Gallery Metabox +2
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versions up to, and including, 1.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Gallery Metabox +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy