The Gallery Portfolio plugin for WordPress is at risk for data changes and loss that are not authorized. Versions 1.4.6 and lower of the plugin have a problem with the way it handles AJAX functions; this can allow people who are not logged into the website to make changes to images, albums, and portfolios, such as deleting or editing them.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
