← All advisories

Unrated severityNVD Advisory· Published Jun 15, 2022· Updated Apr 28, 2026

WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change

CVE-2021-36891

Description

Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Photo Gallery by Supsysticllm-fuzzy
Range: <=1.15.5
Supsystic/Photo Gallery by Supsystic (WordPress plugin)v5
Range: <= 1.15.5

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/gallery-by-supsystic/wordpress-photo-gallery-by-supsystic-plugin-1-15-5-cross-site-request-forgery-csrf-leading-to-plugin-settings-changemitrex_refsource_CONFIRM
wordpress.org/plugins/gallery-by-supsystic/mitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.