Log out
Get PRO

Latest

Input validation vulnerability in Galleria 1.0.3

  • Severity: medium-risk
  • Status: Open
  • Publication: June 16, 2023

The Galleria plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This vulnerability affects all versions up to, and including, 1.0.3. The problem occurs because the plugin does not have adequate protection against unauthorised users. This means that an attacker might be able to trick a site administrator into clicking a link that changes the plugin theme, even though the administrator hasn’t given permission for this to happen.

Detected in:

Galleria open vulnerable versions: >= * <= 1.0.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.