Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-37095 EUVD-2024-36964GHSA-69p7-3985-wf2c

WordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.7.3.

Affected products

VendorProductAffectedFixed
Envira Gallery Team Envira Photo Gallery ≤ 1.8.7.3 —

References