WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability

CVE-2023-33995

Summary

A missing authorization vulnerability in the Photo Gallery plugin by 10Web allows attackers to exploit incorrectly configured access control security levels. This flaw can be particularly dangerous as it exposes sensitive areas of the application to unauthorized users. The issue affects versions from an unspecified starting point through 1.8.15, underscoring the importance of employing robust access controls and ensuring secure configurations to mitigate potential exploitation.

References