WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities - CVE-2020-35942 - Vulnerability Database

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities - CVE-2020-35942

Critical
Reference: CVE-2020-35942
Title: WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities
Overview:

WordPress Plugin NextGEN Gallery-WordPress Gallery is prone to multiple cross-site request forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application other attacks are also possible. WordPress Plugin NextGEN Gallery-WordPress Gallery version 3.4.7 is vulnerable prior versions may also be affected.