CVE-2024-3632: Smart Image Gallery < 1.0.19 - Update/Delete Google API Key via CSRF
The Smart Image Gallery WordPress plugin before 1.0.19 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3632?
CVE-2024-3632 is considered a medium-level severity vulnerability due to the potential for CSRF attacks against logged-in administrators.
How do I fix CVE-2024-3632?
To fix CVE-2024-3632, update the Smart Image Gallery WordPress plugin to version 1.0.19 or later.
What type of vulnerability is CVE-2024-3632?
CVE-2024-3632 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Smart Image Gallery WordPress plugin.
Who is affected by CVE-2024-3632?
CVE-2024-3632 affects users of the Smart Image Gallery WordPress plugin prior to version 1.0.19, specifically those who have admin access.
What can attackers do with CVE-2024-3632?
Attackers can exploit CVE-2024-3632 to manipulate settings of the Smart Image Gallery plugin if they trick a logged-in admin into executing a malicious request.