TI-2024-05318 CVE-2024-5724 · GHSA-8q9h-wh74-mr38Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object InjectionPriority MEDIUM 41The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.3 via deserialization of untrusted input 'PVGM_all_photos_details' parameter.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00624 · Published 2024-06-19 · No fix listed CWE-502