Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:8A034004-F421-49B5-B5CC-F45BDFB1EB82
HistorySep 12, 2022 - 12:00 a.m.

Photospace Gallery <= 2.3.5 - Subscriber+ Arbitrary Settings Update

2022-09-1200:00:00
wpscan.com
7
photospace gallery
arbitrary settings
update
authorization
authenticated users
subscriber

0.001 Low

EPSS

Percentile

19.4%

JSON

The plugin does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

CPENameOperatorVersion
photospaceeq*

Related

patchstack 1
cve 1
cvelist 1
prion 1
nvd 1
patchstack
patchstack
WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability
2022-09-12 00:00:00
cve
cve
CVE-2022-38135
2022-09-12 21:15:11
cvelist
cvelist
CVE-2022-38135 WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability
2022-09-12 00:00:00
prion
prion
Improper access control
2022-09-12 21:15:00
nvd
nvd
CVE-2022-38135
2022-09-12 21:15:11

0.001 Low

EPSS

Percentile

19.4%

JSON
Related for WPVDB-ID:8A034004-F421-49B5-B5CC-F45BDFB1EB82
patchstack1cve1cvelist1prion1nvd1