A WP Life

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

A WP Life records in CISA KEV

No A WP Life vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Event Monster 6 records HIGH Album Gallery 2 records LOW Blog Filter 2 records LOW Formula 2 records LOW Slider Responsive Slideshow 2 records MEDIUM Weather Effect 2 records LOW Coming Soon Maintenance Mode 1 record LOW Contact Form Widget 1 record MEDIUM

Records

2 records in Album Gallery · all components

TI-2024-23589 CVE-2024-35720 · GHSA-qjqc-63v2-7m34

WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00356 Published 2024-06-10 No fix listed CWE-862

TI-2023-09471 CVE-2023-23646 · GHSA-3rv7-4fgp-6q58

WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Album Gallery – WordPress Gallery plugin <= 1.4.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-07-17 No fix listed CWE-352

Open these records in search →

Critical	2
High	20
Medium	21
Low	0
No CVSS	0