Vulnerabilities > CVE-2023-2561 - Unspecified vulnerability in Gallery-Metabox Project Gallery-Metabox 1.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
gallery-metabox-project
NVD
Published: 2023-07-12
Updated: 2024-11-21

Summary

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with this plugin.

Vulnerable Configurations

Part Description Count
Application
Gallery-Metabox_Project
2

References