CVE-2024-8437
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Sep 25, 2024
Updated: Sep 26, 2024
CWE ID 862
Summary
CVE-2024-8437 is a vulnerability affecting the WP Easy Gallery plugin for WordPress. This issue allows authenticated attackers, with subscriber-level access and above, to gain unauthorized access to modify galleries. The vulnerability stems from a missing capability check on several AJAX functions, specifically wpeg_settings and wpeg_add_gallery, in all versions up to 4.8.5. This flaw puts sensitive gallery data at risk and necessitates immediate patching to mitigate potential harm.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.