Threats tagged 'ghsa-qvxj-23x4-63x3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2025-11448The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized Medium4.32025-11-08GCVE DatabaseCVE-2025-11448 The Envira Photo Gallery plugin for WordPress contains a vulnerability in its REST API endpoint '/envira-convert/v1/bulk-convert' that allows authenticated users with contributor-level access or higher to modify data without proper authorization checks. This issue affects all versions up to and including 1.11.0 and enables unauthorized conversion of galleries to Envira galleries. Report on CVE-2025-11448 Vulnerability CWE-862 #ghsa-qvxj-23x4-63x3	GCVE Database	2025-11-08

Page 1 of 1