Medium · 4.3 CVE-2024-35628 EUVD-2024-35389GHSA-r74r-r8j3-9px2

WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerability

Published Jun 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.

Vendor	Product	Affected	Fixed
Photo Gallery Team	Photo Gallery by 10Web	≤ 1.8.25	—