CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-12114

The FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogallery_attachment_modal_save AJAX action due to missing validation on a user controlled key (img_id). This makes it possible for authenticated attackers, with granted access and above, to update arbitrary post and page content. This requires the Gallery Creator Role setting to be a value lower than 'Editor' for there to be any real impact.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 15.0%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2024-12114

Fooplugins » Foogallery » Version: N/A

cpe:2.3:a:fooplugins:foogallery:-
Fooplugins » Foogallery » Version: 1.1.7

cpe:2.3:a:fooplugins:foogallery:1.1.7
Fooplugins » Foogallery » Version: 1.1.8

cpe:2.3:a:fooplugins:foogallery:1.1.8
Fooplugins » Foogallery » Version: 1.1.8.1

cpe:2.3:a:fooplugins:foogallery:1.1.8.1
Fooplugins » Foogallery » Version: 1.1.8.2

cpe:2.3:a:fooplugins:foogallery:1.1.8.2
Fooplugins » Foogallery » Version: 1.10.0

cpe:2.3:a:fooplugins:foogallery:1.10.0
Fooplugins » Foogallery » Version: 1.10.1

cpe:2.3:a:fooplugins:foogallery:1.10.1
Fooplugins » Foogallery » Version: 1.10.3

cpe:2.3:a:fooplugins:foogallery:1.10.3
Fooplugins » Foogallery » Version: 1.10.4

cpe:2.3:a:fooplugins:foogallery:1.10.4
Fooplugins » Foogallery » Version: 1.2.0

cpe:2.3:a:fooplugins:foogallery:1.2.0
Fooplugins » Foogallery » Version: 1.2.1

cpe:2.3:a:fooplugins:foogallery:1.2.1
Fooplugins » Foogallery » Version: 1.2.10

cpe:2.3:a:fooplugins:foogallery:1.2.10
Fooplugins » Foogallery » Version: 1.2.11

cpe:2.3:a:fooplugins:foogallery:1.2.11
Fooplugins » Foogallery » Version: 1.2.12

cpe:2.3:a:fooplugins:foogallery:1.2.12
Fooplugins » Foogallery » Version: 1.2.13

cpe:2.3:a:fooplugins:foogallery:1.2.13
Fooplugins » Foogallery » Version: 1.2.15

cpe:2.3:a:fooplugins:foogallery:1.2.15
Fooplugins » Foogallery » Version: 1.2.16

cpe:2.3:a:fooplugins:foogallery:1.2.16
Fooplugins » Foogallery » Version: 1.2.17

cpe:2.3:a:fooplugins:foogallery:1.2.17
Fooplugins » Foogallery » Version: 1.2.18

cpe:2.3:a:fooplugins:foogallery:1.2.18
Fooplugins » Foogallery » Version: 1.2.19

cpe:2.3:a:fooplugins:foogallery:1.2.19
Fooplugins » Foogallery » Version: 1.2.20

cpe:2.3:a:fooplugins:foogallery:1.2.20
Fooplugins » Foogallery » Version: 1.2.4

cpe:2.3:a:fooplugins:foogallery:1.2.4
Fooplugins » Foogallery » Version: 1.2.5

cpe:2.3:a:fooplugins:foogallery:1.2.5
Fooplugins » Foogallery » Version: 1.2.6

cpe:2.3:a:fooplugins:foogallery:1.2.6
Fooplugins » Foogallery » Version: 1.2.7

cpe:2.3:a:fooplugins:foogallery:1.2.7
Fooplugins » Foogallery » Version: 1.2.8

cpe:2.3:a:fooplugins:foogallery:1.2.8
Fooplugins » Foogallery » Version: 1.2.9

cpe:2.3:a:fooplugins:foogallery:1.2.9
Fooplugins » Foogallery » Version: 1.3.28

cpe:2.3:a:fooplugins:foogallery:1.3.28
Fooplugins » Foogallery » Version: 1.3.6

cpe:2.3:a:fooplugins:foogallery:1.3.6
Fooplugins » Foogallery » Version: 1.3.7

cpe:2.3:a:fooplugins:foogallery:1.3.7
Fooplugins » Foogallery » Version: 1.3.8

cpe:2.3:a:fooplugins:foogallery:1.3.8
Fooplugins » Foogallery » Version: 1.4.12

cpe:2.3:a:fooplugins:foogallery:1.4.12
Fooplugins » Foogallery » Version: 1.4.14

cpe:2.3:a:fooplugins:foogallery:1.4.14
Fooplugins » Foogallery » Version: 1.4.15

cpe:2.3:a:fooplugins:foogallery:1.4.15
Fooplugins » Foogallery » Version: 1.4.25

cpe:2.3:a:fooplugins:foogallery:1.4.25
Fooplugins » Foogallery » Version: 1.4.26

cpe:2.3:a:fooplugins:foogallery:1.4.26
Fooplugins » Foogallery » Version: 1.4.27

cpe:2.3:a:fooplugins:foogallery:1.4.27
Fooplugins » Foogallery » Version: 1.4.29

cpe:2.3:a:fooplugins:foogallery:1.4.29
Fooplugins » Foogallery » Version: 1.4.3

cpe:2.3:a:fooplugins:foogallery:1.4.3
Fooplugins » Foogallery » Version: 1.4.30

cpe:2.3:a:fooplugins:foogallery:1.4.30
Fooplugins » Foogallery » Version: 1.4.31

cpe:2.3:a:fooplugins:foogallery:1.4.31
Fooplugins » Foogallery » Version: 1.4.4

cpe:2.3:a:fooplugins:foogallery:1.4.4
Fooplugins » Foogallery » Version: 1.4.5

cpe:2.3:a:fooplugins:foogallery:1.4.5
Fooplugins » Foogallery » Version: 1.4.6

cpe:2.3:a:fooplugins:foogallery:1.4.6
Fooplugins » Foogallery » Version: 1.4.7

cpe:2.3:a:fooplugins:foogallery:1.4.7
Fooplugins » Foogallery » Version: 1.4.8

cpe:2.3:a:fooplugins:foogallery:1.4.8
Fooplugins » Foogallery » Version: 1.5.8

cpe:2.3:a:fooplugins:foogallery:1.5.8
Fooplugins » Foogallery » Version: 1.5.9

cpe:2.3:a:fooplugins:foogallery:1.5.9
Fooplugins » Foogallery » Version: 1.6.1

cpe:2.3:a:fooplugins:foogallery:1.6.1
Fooplugins » Foogallery » Version: 1.6.10

cpe:2.3:a:fooplugins:foogallery:1.6.10
Fooplugins » Foogallery » Version: 1.6.11

cpe:2.3:a:fooplugins:foogallery:1.6.11
Fooplugins » Foogallery » Version: 1.6.13

cpe:2.3:a:fooplugins:foogallery:1.6.13
Fooplugins » Foogallery » Version: 1.6.14

cpe:2.3:a:fooplugins:foogallery:1.6.14
Fooplugins » Foogallery » Version: 1.6.15

cpe:2.3:a:fooplugins:foogallery:1.6.15
Fooplugins » Foogallery » Version: 1.6.17

cpe:2.3:a:fooplugins:foogallery:1.6.17
Fooplugins » Foogallery » Version: 1.6.7

cpe:2.3:a:fooplugins:foogallery:1.6.7
Fooplugins » Foogallery » Version: 1.7.4

cpe:2.3:a:fooplugins:foogallery:1.7.4
Fooplugins » Foogallery » Version: 1.7.6

cpe:2.3:a:fooplugins:foogallery:1.7.6
Fooplugins » Foogallery » Version: 1.7.7

cpe:2.3:a:fooplugins:foogallery:1.7.7
Fooplugins » Foogallery » Version: 1.7.8

cpe:2.3:a:fooplugins:foogallery:1.7.8
Fooplugins » Foogallery » Version: 1.8.11

cpe:2.3:a:fooplugins:foogallery:1.8.11
Fooplugins » Foogallery » Version: 1.8.12

cpe:2.3:a:fooplugins:foogallery:1.8.12
Fooplugins » Foogallery » Version: 1.8.14

cpe:2.3:a:fooplugins:foogallery:1.8.14
Fooplugins » Foogallery » Version: 1.8.18

cpe:2.3:a:fooplugins:foogallery:1.8.18
Fooplugins » Foogallery » Version: 1.8.20

cpe:2.3:a:fooplugins:foogallery:1.8.20
Fooplugins » Foogallery » Version: 1.8.8

cpe:2.3:a:fooplugins:foogallery:1.8.8
Fooplugins » Foogallery » Version: 1.9.11

cpe:2.3:a:fooplugins:foogallery:1.9.11
Fooplugins » Foogallery » Version: 1.9.23

cpe:2.3:a:fooplugins:foogallery:1.9.23
Fooplugins » Foogallery » Version: 1.9.24

cpe:2.3:a:fooplugins:foogallery:1.9.24
Fooplugins » Foogallery » Version: 1.9.28

cpe:2.3:a:fooplugins:foogallery:1.9.28
Fooplugins » Foogallery » Version: 1.9.30

cpe:2.3:a:fooplugins:foogallery:1.9.30
Fooplugins » Foogallery » Version: 1.9.31

cpe:2.3:a:fooplugins:foogallery:1.9.31
Fooplugins » Foogallery » Version: 1.9.34

cpe:2.3:a:fooplugins:foogallery:1.9.34
Fooplugins » Foogallery » Version: 1.9.35

cpe:2.3:a:fooplugins:foogallery:1.9.35
Fooplugins » Foogallery » Version: 1.9.36

cpe:2.3:a:fooplugins:foogallery:1.9.36
Fooplugins » Foogallery » Version: 1.9.37

cpe:2.3:a:fooplugins:foogallery:1.9.37
Fooplugins » Foogallery » Version: 1.9.38

cpe:2.3:a:fooplugins:foogallery:1.9.38
Fooplugins » Foogallery » Version: 1.9.39

cpe:2.3:a:fooplugins:foogallery:1.9.39
Fooplugins » Foogallery » Version: 1.9.40

cpe:2.3:a:fooplugins:foogallery:1.9.40
Fooplugins » Foogallery » Version: 1.9.44

cpe:2.3:a:fooplugins:foogallery:1.9.44
Fooplugins » Foogallery » Version: 1.9.45

cpe:2.3:a:fooplugins:foogallery:1.9.45
Fooplugins » Foogallery » Version: 1.9.46

cpe:2.3:a:fooplugins:foogallery:1.9.46
Fooplugins » Foogallery » Version: 1.9.47

cpe:2.3:a:fooplugins:foogallery:1.9.47
Fooplugins » Foogallery » Version: 1.9.48

cpe:2.3:a:fooplugins:foogallery:1.9.48
Fooplugins » Foogallery » Version: 1.9.49

cpe:2.3:a:fooplugins:foogallery:1.9.49
Fooplugins » Foogallery » Version: 1.9.50

cpe:2.3:a:fooplugins:foogallery:1.9.50
Fooplugins » Foogallery » Version: 1.9.52

cpe:2.3:a:fooplugins:foogallery:1.9.52
Fooplugins » Foogallery » Version: 1.9.53

cpe:2.3:a:fooplugins:foogallery:1.9.53
Fooplugins » Foogallery » Version: 1.9.8

cpe:2.3:a:fooplugins:foogallery:1.9.8
Fooplugins » Foogallery » Version: 2.0.20

cpe:2.3:a:fooplugins:foogallery:2.0.20
Fooplugins » Foogallery » Version: 2.0.24

cpe:2.3:a:fooplugins:foogallery:2.0.24
Fooplugins » Foogallery » Version: 2.0.30

cpe:2.3:a:fooplugins:foogallery:2.0.30
Fooplugins » Foogallery » Version: 2.0.35

cpe:2.3:a:fooplugins:foogallery:2.0.35
Fooplugins » Foogallery » Version: 2.0.39

cpe:2.3:a:fooplugins:foogallery:2.0.39
Fooplugins » Foogallery » Version: 2.1.18

cpe:2.3:a:fooplugins:foogallery:2.1.18
Fooplugins » Foogallery » Version: 2.1.24

cpe:2.3:a:fooplugins:foogallery:2.1.24
Fooplugins » Foogallery » Version: 2.1.28

cpe:2.3:a:fooplugins:foogallery:2.1.28
Fooplugins » Foogallery » Version: 2.1.33

cpe:2.3:a:fooplugins:foogallery:2.1.33
Fooplugins » Foogallery » Version: 2.1.34

cpe:2.3:a:fooplugins:foogallery:2.1.34
Fooplugins » Foogallery » Version: 2.1.35

cpe:2.3:a:fooplugins:foogallery:2.1.35
Fooplugins » Foogallery » Version: 2.2.16

cpe:2.3:a:fooplugins:foogallery:2.2.16
Fooplugins » Foogallery » Version: 2.2.20

cpe:2.3:a:fooplugins:foogallery:2.2.20
Fooplugins » Foogallery » Version: 2.2.22

cpe:2.3:a:fooplugins:foogallery:2.2.22
Fooplugins » Foogallery » Version: 2.2.26

cpe:2.3:a:fooplugins:foogallery:2.2.26
Fooplugins » Foogallery » Version: 2.2.35

cpe:2.3:a:fooplugins:foogallery:2.2.35
Fooplugins » Foogallery » Version: 2.2.41

cpe:2.3:a:fooplugins:foogallery:2.2.41
Fooplugins » Foogallery » Version: 2.2.42

cpe:2.3:a:fooplugins:foogallery:2.2.42
Fooplugins » Foogallery » Version: 2.2.44

cpe:2.3:a:fooplugins:foogallery:2.2.44
Fooplugins » Foogallery » Version: 2.2.6

cpe:2.3:a:fooplugins:foogallery:2.2.6
Fooplugins » Foogallery » Version: 2.2.7

cpe:2.3:a:fooplugins:foogallery:2.2.7
Fooplugins » Foogallery » Version: 2.2.8

cpe:2.3:a:fooplugins:foogallery:2.2.8
Fooplugins » Foogallery » Version: 2.3.2

cpe:2.3:a:fooplugins:foogallery:2.3.2
Fooplugins » Foogallery » Version: 2.3.3

cpe:2.3:a:fooplugins:foogallery:2.3.3
Fooplugins » Foogallery » Version: 2.3.4

cpe:2.3:a:fooplugins:foogallery:2.3.4
Fooplugins » Foogallery » Version: 2.4.0.1

cpe:2.3:a:fooplugins:foogallery:2.4.0.1
Fooplugins » Foogallery » Version: 2.4.1

cpe:2.3:a:fooplugins:foogallery:2.4.1
Fooplugins » Foogallery » Version: 2.4.15

cpe:2.3:a:fooplugins:foogallery:2.4.15
Fooplugins » Foogallery » Version: 2.4.16

cpe:2.3:a:fooplugins:foogallery:2.4.16
Fooplugins » Foogallery » Version: 2.4.17

cpe:2.3:a:fooplugins:foogallery:2.4.17
Fooplugins » Foogallery » Version: 2.4.18

cpe:2.3:a:fooplugins:foogallery:2.4.18
Fooplugins » Foogallery » Version: 2.4.19

cpe:2.3:a:fooplugins:foogallery:2.4.19
Fooplugins » Foogallery » Version: 2.4.2

cpe:2.3:a:fooplugins:foogallery:2.4.2
Fooplugins » Foogallery » Version: 2.4.20

cpe:2.3:a:fooplugins:foogallery:2.4.20
Fooplugins » Foogallery » Version: 2.4.22

cpe:2.3:a:fooplugins:foogallery:2.4.22
Fooplugins » Foogallery » Version: 2.4.25

cpe:2.3:a:fooplugins:foogallery:2.4.25
Fooplugins » Foogallery » Version: 2.4.27

cpe:2.3:a:fooplugins:foogallery:2.4.27
Fooplugins » Foogallery » Version: 2.4.29

cpe:2.3:a:fooplugins:foogallery:2.4.29
Fooplugins » Foogallery » Version: 2.4.5

cpe:2.3:a:fooplugins:foogallery:2.4.5
Fooplugins » Foogallery » Version: 2.4.6

cpe:2.3:a:fooplugins:foogallery:2.4.6
Fooplugins » Foogallery » Version: 2.4.7

cpe:2.3:a:fooplugins:foogallery:2.4.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-12114

Products

Pricing

Contact Us