WordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerability

CVE-2023-25988

Summary

A vulnerability exists in the Video Gallery – YouTube Gallery plugin developed by Total-Soft that results from missing authorization. This flaw allows unauthorized actors to exploit incorrectly configured access control security levels, potentially leading to unauthorized access to sensitive features or user data. The affected versions, ranging from an unspecified version up to 1.7.6, require immediate attention to ensure proper access control mechanisms are implemented to safeguard against potential exploitation.

References