Description
WordPress Plugin Gallery-Photo Albums-Portfolio is prone to multiple cross-site request forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Gallery-Photo Albums-Portfolio version 1.2.59 is vulnerable; other versions may also be affected.
Remediation
Edit the source code to ensure that CSRF protection is implemented with Nonce-like mechanism
References
Related Vulnerabilities
MySQL CVE-2017-3453 Vulnerability (CVE-2017-3453)
MongoDb Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6494)
Mailman Other Vulnerability (CVE-2002-0389)
WordPress Plugin Gallery-Flagallery Photo Portfolio Cross-Site Request Forgery (3.01)
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7366)