Photo Contest Vulnerabilities

[en] The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the load_images_thumbnail() and edit_gallery() functions. This makes it possible for unauthenticated attacker...

Affected:

up to 1.0.6

Fix:

No patched version reported

Disclosed:

Jul 1, 2023

CVE-2021-4384 on NVD →

Cross-Site Request Forgery (CSRF) vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress WordPress Photo Gallery – Image Gallery plugin (versions <= 1.0.8).

Affected:

up to 1.0.8

Fix:

No patched version reported

Disclosed:

Aug 16, 2021

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the load_images_thumbnail() and edit_gallery() functions. This makes it possible for unauthenticated attackers to...

CVSS:

4.3

Affected:

up to 1.0.6

Fix:

No patched version reported

Disclosed:

Jul 16, 2021

CVE-2021-4384 on NVD →

Multiple plugins are affected by CSRF issues due to a logic flaw in their CSRF checks, which could allow attackers to make users perform unwanted actions rucy &lt;= 0.4.4 wp-backgrounds-lite &lt;= 2.3 wp-security-questions &lt;= 1.0.5 photo-contest &lt;= 1.0.6 opal-estate &lt;= 1.6.11 rays-grid &lt;= 1.2.2

Affected:

up to 1.1.1

Fix:

No patched version reported