Main Vulnerability Database SB2022121316

SB2022121316 - Improper access control in WordPress WP Bootstrap Gallery plugin

Published: December 13, 2022

Security Bulletin ID SB2022121316

CSH Severity

Medium

Patch available

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2022-43471)

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can bypass implemented security restrictions and gain unauthorized access.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

https://patchstack.com/database/vulnerability/wp-bootstrap-gallery/wordpress-wp-bootstrap-gallery-plugin-1-1-broken-access-control-vulnerability