Unauthorized Access to Sensitive Information in WP Photo Album Plus
CVE-2023-49774

5.3MEDIUM

Key Information:

Vendor
J.n. Breetvelt A.k.a. Opajaap
Status
WP Photo Album Plus
Vendor
CVE Published:
4 June 2024

Summary

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.

Affected Version(s)

WP Photo Album Plus <= 8.5.02.005

References

https://patchstack.com/database/vulnerability/wp-photo-al...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Brandon Roldan (Patchstack Alliance)
.