CVE-2024-3097

moderate-risk
Published 2024-04-09

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_item function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data including EXIF and other metadata of any image uploaded through the plugin.

Do I need to act?

!
22.1% chance of exploitation in next 30 days
EPSS score — higher than 78% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Imagely

References (8)

Product https://plugins.trac.wordpress.org/browser/nextgen-gallery/trunk/src/REST/Admin/...
Patch https://plugins.trac.wordpress.org/changeset/3063940/nextgen-gallery/trunk/src/R...
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/75f87f99-9f0d-46c2-a6f...
Broken Link https://zpbrent.github.io/pocs/8-plugin-nextgen-gallery-InfoDis-20240327.mp4
Product https://plugins.trac.wordpress.org/browser/nextgen-gallery/trunk/src/REST/Admin/...
Patch https://plugins.trac.wordpress.org/changeset/3063940/nextgen-gallery/trunk/src/R...
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/75f87f99-9f0d-46c2-a6f...
Broken Link https://zpbrent.github.io/pocs/8-plugin-nextgen-gallery-InfoDis-20240327.mp4
40
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 14/34 · Moderate
Exposure 5/34 · Minimal