CVE-2022-2543 | BDVDB-2026-183757 Detail

Visual Portfolio, Photo Gallery & Post Grid

Description#

The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.18.0 does not have proper authorisation checks in some of its REST endpoints, allowing unauthenticated users to call them and inject arbitrary CSS in arbitrary saved layouts

Impact#

No impact statement in the source data.

Weaknesses#

CWE-862 Missing Authorization

References#

https://wpscan.com/vulnerability/5dc8b671-f2fa-47be-8664-9005c4fdbea8

Exploit#

No public exploit known

History#

Version 12022-09-05Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.