WordPress Plugin Vulnerabilities

Cool Video Gallery 1.8 - admin/gallery-settings.php Gallery Settings Manipulation CSRF

Description

The Cool Video Gallery WordPress plugin was affected by an admin/gallery-settings.php Gallery Settings Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
cool-video-gallery
Fixed in 1.9

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
14493e7e-0118-4472-bcce-0a92a762cd30

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2023-02-06
Title
Conversios.io < 5.2.4 - Settings Update via CSRF
Published
2024-04-12
Title
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
Published
2022-06-16
Title
Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRF
Published
2024-03-22
Title
Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing < 3.6.4 - Plugin Settings Update via CSRF
Published
2025-11-11
Title
Asgaros Forum < 3.3.0 - Cross-Site Request Forgery to Subscription Settings Update