CVE-2024-3581

Description

The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the add_media_library_images_to_gallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attackers, with subscriber access or above, to upload arbitrary images to a gallery.

Reserved 2024-04-10 | Published 2024-05-02 | Updated 2024-08-01 | Assigner Wordfence

Problem types

CWE-862 Missing Authorization

Product status

Default status
unaffected

*
affected

Timeline

2024-04-19:

Disclosed

Credits

Lucio Sá finder

References

www.wordfence.com/...-ede2-43ac-9ec4-2cd99cd34ae2?source=cve

plugins.trac.wordpress.org/.../maxgalleria-image-gallery.php

plugins.trac.wordpress.org/...%2Ftrunk&sfp_email=&sfph_mail=

cve.org (CVE-2024-3581)

nvd.nist.gov (CVE-2024-3581)

Download JSON