Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-36891 EUVD-2021-23467GHSA-jw5f-6r3j-fc5c

WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change

Published Jun 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: supsystic Product: Photo Gallery by Supsystic (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.

Affected products

VendorProductAffectedFixed
Supsystic Photo Gallery by Supsystic (WordPress plugin) <= 1.15.5 – ≤ 1.15.5 —

References