Medium · 4.3 CVE-2023-45631 EUVD-2023-49923GHSA-7wvc-68qr-wgqx

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpdevart Product: Responsive Image Gallery, Gallery Album

Description

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.

Affected products

Vendor	Product	Affected	Fixed
wpdevart	Responsive Image Gallery, Gallery Album	≤ 2.0.3	—

References

https://patchstack.com/database/wordpress/plugin/gallery-album/vulnerability/wordpress-gallery-image-and-video-gallery-with-thumbnails-plugin-2-0-3-broken-access-control-vulnerability?_s_id=cve vdb-entry