Skip to content
OpenAdvisories

Vendor

mhmrajib

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    WP Books Gallery <= 4.8.0 - Missing Authorization to Unauthenticated Settings Update via 'permalink_structure' Parameter

    The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0. This is due to the absence of capability checks and nonce verification in the admin_init hook that handles the permalink settings update at…