CVE Database /
CVE-2024-43924
CVE · Critical
CVE-2024-43924 — Responsive Lightbox & Gallery [responsive-lightbox] < 2.4.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-43924
|
Responsive Lightbox & Gallery [responsive-lightbox] < 2.4.8 |
Missing Authorization |
Critical
9.8
|
< 2.4.8
|
2.4.8 |
2024-08-26 |
—
|
CVE-2024-43924
The Responsive Lightbox plugin for WordPress contains a vulnerability in versions up to 2.4.7 where the init_builder() function lacks proper capability verification, allowing unauthenticated attackers to flush rules and modify data they should not have access to. This flaw enables unauthorized parties to perform administrative actions without authentication. The vulnerability has been addressed in version 2.4.8 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings