PT-2023-10288 · WordPress · Video Playlist/Gallery Plugin

Nicashmu · Published 2023-06-01 · Updated 2024-05-17 · CVE-2015-10109

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Video Playlist and Gallery Plugin versions up to 1.136

Description A problem was found in the Video Playlist and Gallery Plugin. It affects some unknown functionality of the file wp-media-cincopa.php. The issue leads to cross-site request forgery. The attack can be launched remotely.

Recommendations For Video Playlist and Gallery Plugin versions up to 1.136, upgrade to version 1.137 to address this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-10109

Affected Products

Video Playlist/Gallery Plugin

References · 6

• https://github.com/wp-plugins/video-playlist-and-gallery-plugin/releases/tag/1.137 · Patch
• https://github.com/wp-plugins/video-playlist-and-gallery-plugin/commit/ee28e91f4d5404905204c43b7b84a8ffecad932e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10109 · Security Note
• https://vuldb.com/?id.230264 · Note
• https://vuldb.com/?ctiid.230264 · Note
• https://t.me/cvenotify/52008 · Telegram Post