high8.8
CVE-2019-15779
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
Impact
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quadlayers | Wp Social Feed Gallery | before 2.4.8 |