Vulnerabilities

TI-2024-23639 CVE-2024-35770 · GHSA-8rgp-h8v7-xr48

WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Dave Kiss Vimeography: Vimeo Video Gallery WordPress Plugin.This issue affects Vimeography: Vimeo Video Gallery WordPress Plugin: from n/a through 2.4.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00254 Published 2024-06-21 No fix listed CWE-352

TI-2024-00762 CVE-2024-0825 · GHSA-vrx4-h7cg-6q4x

Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection

MEDIUM 42

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_dupl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00893 Published 2024-03-05 No fix listed CWE-502

Vulnerabilities

Filters

WordPress Vimeography plugin <= 2.4.1 - Cross Site Request Forgery (CSRF) vulnerability

Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection