The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.

Published Aug 29, 2019 · Updated Aug 5, 2024 · Assigned by mitre