Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin WordPress Books Gallery Security Bypass (3.5) - Vulnerability Database

WordPress Plugin WordPress Books Gallery Security Bypass (3.5)

Description

WordPress Plugin WordPress Books Gallery is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently make unauthorized AJAX calls and access the debug logs. WordPress Plugin WordPress Books Gallery version 3.5 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.6 or latest

References

https://sploitus.com/exploit?id=WPEX-ID:6DAE6DCA-7474-4008-9FE5-4C62B9F12D0A
https://plugins.svn.wordpress.org/wp-books-gallery/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin TI WooCommerce Wishlist Security Bypass (1.21.11) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin Mobile Booster Security Bypass (1.0) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (2.3.5) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin Revive Old Post-Auto Post to Social Media Security Bypass (6.9.3) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin Rencontre-Dating Site Security Bypass (1.6.9) High
Common tags: Missing Update Authentication Bypass

Severity

High

Classification

CWE-862
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update
Authentication Bypass