Lucene search

PatchstackCVE-2024-37542

HistoryJul 06, 2024 - 1:15 p.m.

CVE-2024-37542

2024-07-0613:15:10

CWE-862

Patchstack

web.nvd.nist.gov

authorization

vulnerability

wpdevart

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

Percentile

14.0%

JSON

Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.

Affected configurations

Nvd

Vulners

Node

wpdevartgalleryRange≤2.0.3wordpress

VendorProductVersionCPE
wpdevartgallery*cpe:2.3:a:wpdevart:gallery:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpdevart	gallery	*	cpe:2.3:a:wpdevart:gallery::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "gallery-album",
    "product": "Responsive Image Gallery, Gallery Album",
    "vendor": "WpDevArt",
    "versions": [
      {
        "lessThanOrEqual": "2.0.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/gallery-album/wordpress-gallery-image-and-video-gallery-with-thumbnails-plugin-2-0-3-broken-access-control-vulnerability-2?_s_id=cve