← Database

CVE-2022-38135

MEDIUM CVSS: 5.4 Published: 2022-09-12 Modified: 2026-06-17

Description

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.

Affected Platforms

Photospace Gallery Project Photospace Gallery

Weakness Type

CWE-264, NVD-CWE-Other

References