EPSS
Percentile
27.6%
The plugin does not have CSRF check when removing galleries, which could allow attackers to make logged-in admins perform such action via a CSRF attack