Awesome Responsive Photo Gallery Vulnerabilities

The Awesome Responsive Photo Gallery – Image & Video Lightbox Gallery plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.0.5

Fixed in:

1.2

Disclosed:

Jan 30, 2025

CVE-2025-24697 on NVD →

The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVSS:

6.1

Affected:

up to 1.0.5

Fixed in:

2.1

Disclosed:

Jan 14, 2025

CVE-2024-12403 on NVD →