Medium · 4.3 CVE-2023-39917 EUVD-2023-43615GHSA-c994-hpx9-c8x4

WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.

Vendor	Product	Affected	Fixed
Photo Gallery Team	Photo Gallery by Ays – Responsive Image Gallery	≤ 5.2.6	—