Vimeography Vulnerabilities

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:

5.3

Affected:

up to 2.4.4

Fixed in:

2.4.5

Disclosed:

Dec 11, 2024

CVE-2024-54366 on NVD →

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.1. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform actions like refreshi...

CVSS:

4.3

Affected:

up to 2.4.1

Fixed in:

2.4.2

Disclosed:

Jun 18, 2024

CVE-2024-35770 on NVD →

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplicate_gallery function. This makes it possible for authenticated...

CVSS:

8.8

Affected:

up to 2.3.2

Fixed in:

2.3.3

Disclosed:

Mar 4, 2024

CVE-2024-0825 on NVD →