CVE-2021-24795CWE-352

CVE-2021-24795: vulnerability in Filter Portfolio Gallery

Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF

Published · Updated

Follow this CVE+ Monitor Filter Portfolio Gallery

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.
Affected products
Unknown · Filter Portfolio Gallery