Lucene search
HistoryMar 01, 2023 - 2:15 p.m.
CVE-2022-38468
cross-site request forgery
nextgen gallery plugin
thumbnail alteration
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
21.4%
Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.
Affected configurations
Node
imagelynextgen_galleryRange<3.29wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| imagely | nextgen_gallery | * | cpe:2.3:a:imagely:nextgen_gallery:*:*:*:*:*:wordpress:*:* |
Related
openvas
openvas
WordPress NextGEN Gallery Plugin < 3.29 CSRF Vulnerability
2023-03-02 00:00:00
wpvulndb
wpvulndb
NextGEN Gallery < 3.29 - Thumbnail Deletion via CSRF
2023-02-14 00:00:00
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-03-01 14:15:00
cve
cve
CVE-2022-38468
2023-03-01 14:15:15
wordfence
wordfence
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
21.4%
Related for NVD:CVE-2022-38468