CVE-2019-15779: CSRF
Published Aug 29, 2019
·Updated
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete.
Affected Software
1 affected component
Quadlayers Wp Social Feed Gallery Wordpress<2.4.8
Event History
Aug 29, 2019
CVE Published
via MITRE·12:34 PM
Data Sourced
via MITRE·12:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15779?
CVE-2019-15779 has been assigned a severity rating that indicates it could lead to unauthorized actions on behalf of users.
2
How do I fix CVE-2019-15779?
To fix CVE-2019-15779, you should update the Insta-Gallery plugin to version 2.4.8 or later.
3
What type of vulnerability is CVE-2019-15779?
CVE-2019-15779 is a security vulnerability due to the absence of nonce validation in certain plugin functionalities.
4
Who is affected by CVE-2019-15779?
Users of the Insta-Gallery plugin for WordPress versions earlier than 2.4.8 are affected by CVE-2019-15779.
5
What action is vulnerable due to CVE-2019-15779?
CVE-2019-15779 allows an attacker to execute potentially harmful actions without proper validation.