CVE Database /
CVE-2023-47771
CVE · High
CVE-2023-47771 — Essential Grid Portfolio – Photo Gallery [essential-grid] < 3.0.19 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-47771
|
Essential Grid Portfolio – Photo Gallery [essential-grid] < 3.0.19 (closed) |
Missing Authorization |
High
8.3
|
< 3.0.19
|
3.0.19 |
2023-11-14 |
—
|
CVE-2023-47771
The Essential Grid Portfolio plugin before version 3.0.19 contains a broken access control vulnerability that allows unauthenticated or unprivileged users to perform actions restricted to higher-privilege accounts due to missing authorization checks and nonce token validation. The flaw was discovered by Rafie Muhammad and reported through Patchstack. Users should upgrade to version 3.0.19 or later to resolve this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings