Customizable WordPress Gallery Plugin – Modula Image Gallery, 99d6f905b92bff123934dfbae2441c05f02a0781
- CVE, Research URL
- Home page URL
-
Security reports for Customizable WordPress Gallery Plugin – Modula Image Gallery
- Published on
- Sep 10, 2023
- Research Description
- Modula Image Gallery – Photo Grid & Video Gallery [modula-best-grid-gallery] < 2.7.5 Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images' The Modula plugin for WordPress is vulnerable to unauthorized modification of data due to an incomplete capability check on the 'save_image' and 'save_images' functions in versions up to, and including, 2.7.4. This makes it possible for authenticated attackers with the 'edit_others_posts' but not the 'edit_posts' capability to save images. Note that this would only be considered a vulnerability on extremely unusual configurations.
- Affected versions
-
max 2.7.5.
- Status
-
vulnerable