Vulnerabilities

TI-2024-09073 CVE-2024-9776 · GHSA-w6g8-4xp6-6cr3

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

LOW 22

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00357 Published 2024-10-12 No fix listed CWE-79

TI-2024-09075 CVE-2024-9778 · GHSA-f3v3-rc63-5rrv

ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update

LOW 20

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00253 Published 2024-10-12 No fix listed CWE-352

Vulnerabilities

Filters

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update