CVE-2024-11501: Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection
The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wdgallery$id parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11501?
CVE-2024-11501 is considered a high severity vulnerability due to the potential for PHP Object Injection affecting WordPress sites.
How do I fix CVE-2024-11501?
To fix CVE-2024-11501, update the Gallery plugin for WordPress to version 1.4 or later.
Who is affected by CVE-2024-11501?
CVE-2024-11501 affects users of the Gallery plugin for WordPress versions 1.3 and below, particularly those with Contributor-level access.
What type of vulnerability is CVE-2024-11501?
CVE-2024-11501 is a PHP Object Injection vulnerability due to the deserialization of untrusted input.
Is authentication required to exploit CVE-2024-11501?
Yes, authentication is required to exploit CVE-2024-11501, which limits the attacker's access to contributors and above.