CVE-2024-8431

Summary

CVE-2024-8431 is a vulnerability affecting the Rbs Image Gallery plugin for WordPress. The Photo Gallery, Images, Slider components are found to be susceptible to unauthorized data access. This issue stems from a missing capability check within the ajaxGetGalleryJson() function. Attackers who have subscriber-level access or higher can exploit this vulnerability to gain unauthorized access to private post titles. All WordPress installations using the Rbs Image Gallery plugin, up to and including version 3.2.21, are at risk. It is advised to update to the latest version or consider alternative plugins to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.