← Database

CVE-2024-7817

MEDIUM CVSS: 6.5 Published: 2024-09-12 Modified: 2026-06-17

Description

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack

Affected Platforms

Michalaugustyniak Misiek Photo Album

Weakness Type

CWE-352, CWE-352

References