Photo Gallery, Images, Slider in Rbs Image Gallery, CVE-2024-8431

CVE, Research URL: CVE-2024-8431
Home page URL: Security reports for Photo Gallery, Images, Slider in Rbs Image Gallery
Application: Photo Gallery, Images, Slider in Rbs Image Gallery
Published on: Oct 08, 2024
Research Description: The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajaxGetGalleryJson() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with subscriber-level access and above, to retrieve private post titles.
Affected versions: Min -, max 3.2.22.
Status: vulnerable