CVE-2024-34377

Summary

CVE-2024-34377 is a Missing Authorization vulnerability affecting the Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugins from version n/a through 1.5.3. An attacker can exploit this vulnerability to gain unauthorized access to protected functions, potentially leading to data manipulation or unauthorized data access. This issue poses a serious risk to websites utilizing these plugins and requires immediate attention for patching or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.