Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical0
High0
Medium2
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2024-11-21

CVE-2023-2562 - Gallery Metabox Plugin

The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to obtain a list of images attached to a post.

PLUGIN Gallery Metabox

CVE-2023-2562

MEDIUM CVSS 4.3 2023-07-12
Threat Entry Updated 2024-11-21

CVE-2023-2561 - Gallery Metabox Plugin

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with this plugin.

PLUGIN Gallery Metabox

CVE-2023-2561

MEDIUM CVSS 4.3 2023-07-12
Scroll to top