Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Ghozylab Subscribe
Filtered by product Gallery For Social Photo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2224 1 Ghozylab 1 Gallery For Social Photo 2022-07-25 N/A 4.3 MEDIUM
The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.0.27 due to failure to properly check for the existence of a nonce in the function gifeed_duplicate_feed. This make it possible for unauthenticated attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a link.