CVE-2024-10535
EUVD-2024-3316906.11.2024, 07:15
The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the remove_unused_thumbnails() function in all versions up to, and including, 1.31. This makes it possible for unauthenticated attackers to delete thumbnails in the video-wc-gallery-thumb directory.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| martinvalchev | video_gallery_for_woocommerce | 𝑥 < 1.32 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| martinvalchev | video_gallery_for_woocommerce | 𝑥 ≤ 1.31 | ADP |
Common Weakness Enumeration
References