Skip to content
OpenAdvisories

Vendor

billerickson

2 known vulnerabilities.

Products

Gallery Metabox 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-2561

    Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove

    The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galler…

    billerickson Gallery Metabox
  • Medium 4.3
    CVE-2023-2562

    Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox

    The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of i…

    billerickson Gallery Metabox