Input validation vulnerability in Gallery – Image and Video Gallery with Thumbnails 2.0.3

The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery. This affects versions of the plugin up to and including 2.0.3. The vulnerability occurs because of incorrect or missing nonce validation on multiple functions, making it possible for unauthenticated attackers to carry out unauthorized actions if they can trick a site administrator into clicking on a link.

Detected in:

Gallery – Image and Video Gallery with Thumbnails open vulnerable versions: >= * <= 2.0.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.