Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-24887 EUVD-2024-22250GHSA-6g9h-hqh5-4f36

WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: contest-gallery Product: Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress: from n/a through 21.2.8.4.

Affected products

VendorProductAffectedFixed
Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress ≤ 21.2.8.4 —

References