WordPress Plugin Vulnerabilities

WP Photo Album Plus < 8.6.01.003 - Insecure Direct Object Reference

Description

The WP Photo Album Plus plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 8.5.02.005 due to missing validation on a user controlled key. This makes it possible for unauthenticated attacker to perform an unauthorized action base don a user controlled key.

Affects Plugins

Plugin icon
wp-photo-album-plus
Fixed in 8.6.01.003

References

CVE
CVE-2023-49812
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/72f3925d-6b3a-43bf-bfd1-fef7e71d5e43

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Kyle Sanchez
Verified
No
WPVDB ID
0561e95c-ae47-4f0d-8e37-2a1f2e73b5d8

Timeline

Publicly Published
2023-12-05 (about 2 years ago)
Added
2023-12-09 (about 2 years ago)
Last Updated
2024-02-02 (about 2 years ago)

Other

Published
Title
Published
2024-11-12
Title
WP ERP < 1.13.4 - Unauthorized Access to Terminated Employee Information
Published
2026-01-02
Title
Innovio <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Published
2025-04-30
Title
WordPress Simple PayPal Shopping Cart < 5.1.4 - Insecure Direct Object Reference via 'quantity'
Published
2024-07-01
Title
MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
Published
2025-01-10
Title
Unlimited Theme Addon For Elementor and WooCommerce < 1.2.3 - Authenticated (Contributor+) Post Disclosure