gallery-by-supsystic Plugin up to 1.8.5 on WordPress cross-site request forgery

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in gallery-by-supsystic Plugin up to 1.8.5 on WordPress (Photo Gallery Software). It has been classified as problematic. This affects an unknown code. Upgrading to version 1.8.6 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
9303154	08/03/2020	VulD...	cve_nvd_summary	The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.	mitre.org	08/03/2020	accepted	100
9303153	08/03/2020	VulD...	cve_assigned	1566345600	mitre.org	08/03/2020	accepted	100
9303147	08/03/2020	VulD...	cvss3_nvd_a	H	nist.gov	08/03/2020	accepted	100
9303146	08/03/2020	VulD...	cvss3_nvd_i	H	nist.gov	08/03/2020	accepted	100
9303145	08/03/2020	VulD...	cvss3_nvd_c	H	nist.gov	08/03/2020	accepted	100
9303144	08/03/2020	VulD...	cvss3_nvd_s	U	nist.gov	08/03/2020	accepted	100
9303143	08/03/2020	VulD...	cvss3_nvd_ui	R	nist.gov	08/03/2020	accepted	100
9303142	08/03/2020	VulD...	cvss3_nvd_pr	N	nist.gov	08/03/2020	accepted	100
9303141	08/03/2020	VulD...	cvss3_nvd_ac	L	nist.gov	08/03/2020	accepted	100
9303140	08/03/2020	VulD...	cvss3_nvd_av	N	nist.gov	08/03/2020	accepted	100
9303127	08/03/2020	VulD...	cvss2_nvd_ai	P	nist.gov	08/03/2020	accepted	100
9303126	08/03/2020	VulD...	cvss2_nvd_ii	P	nist.gov	08/03/2020	accepted	100
9303125	08/03/2020	VulD...	cvss2_nvd_ci	P	nist.gov	08/03/2020	accepted	100
9303124	08/03/2020	VulD...	cvss2_nvd_au	N	nist.gov	08/03/2020	accepted	100
9303123	08/03/2020	VulD...	cvss2_nvd_ac	M	nist.gov	08/03/2020	accepted	100
9303122	08/03/2020	VulD...	cvss2_nvd_av	N	nist.gov	08/03/2020	accepted	100
9303112	08/03/2020	VulD...	cwe	352 (cross site request forgery)		08/03/2020	accepted	100
9303108	08/03/2020	VulD...	type	Photo Gallery Software		08/03/2020	accepted	100
9303161	08/23/2019	VulD...	cvss3_nvd_basescore	8.8	nist.gov	08/23/2019	accepted	90
9303160	08/23/2019	VulD...	cvss3_vuldb_rc	X		08/23/2019	accepted	90