Refine your search

4 vulnerabilities found for by essentialplugin

CVE-2026-6443 (GCVE-0-2026-6443)
Vulnerability from cvelistv5
Published
2026-04-17 06:44
Modified
2026-04-21 19:53
Severity ?
CWE
  • CWE-506 - Embedded Malicious Code
Summary
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites.
Impacted products
Vendor Product Version
essentialplugin Accordion and Accordion Slider Version: 1.4.6
Create a notification for this product.
   essentialplugin Portfolio and Projects Version: 1.5.6
Create a notification for this product.
   essentialplugin Featured Post Creative Version: 1.5.7
Create a notification for this product.
   essentialplugin Post grid and filter ultimate Version: 1.7.4
Create a notification for this product.
   essentialplugin WP Featured Content and Slider Version: 1.7.6
Create a notification for this product.
   essentialplugin Post Ticker Ultimate Version: 1.7.6
Create a notification for this product.
   essentialplugin Trending/Popular Post Slider and Widget Version: 1.8.6
Create a notification for this product.
   essentialplugin Meta Slider and Carousel with Lightbox Version: 2.0.8
Create a notification for this product.
   essentialplugin Album and Image Gallery Plus Lightbox Version: 2.1.8
Create a notification for this product.
   essentialplugin Timeline and History slider Version: 2.4.5
Create a notification for this product.
   essentialplugin WP Blog and Widgets Version: 2.6.6
Create a notification for this product.
   essentialplugin Countdown Timer Ultimate Version: 2.6.9
Create a notification for this product.
   essentialplugin Blog Designer – Post and Widget Version: 2.7.7
Create a notification for this product.
   essentialplugin Team Slider and Team Grid Showcase plus Team Carousel Version: 2.8.6
Create a notification for this product.
   essentialplugin Video gallery and Player Version: 2.8.7
Create a notification for this product.
   essentialplugin Popup Maker and Popup Anything – Popup for opt-ins and Lead Generation Conversions Version: 2.9.1
Create a notification for this product.
   essentialplugin Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget Version: 3.5.6
Create a notification for this product.
   essentialplugin WP Responsive Recent Post Slider/Carousel Version: 3.7.1
Create a notification for this product.
   essentialplugin WP Slick Slider and Image Carousel Version: 3.7.8.1
Create a notification for this product.
   essentialplugin WP Logo Showcase Responsive Slider and Carousel Version: 3.8.7
Create a notification for this product.
   essentialplugin WP responsive FAQ with category plugin Version: 3.9.5
Create a notification for this product.
   essentialplugin WP News and Scrolling Widgets Version: 5.0.6
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6443",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-17T18:49:32.019393Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T18:49:42.999Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Accordion and Accordion Slider",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.4.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Portfolio and Projects",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.5.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Featured Post Creative",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.5.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Post grid and filter ultimate",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.7.4"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP Featured Content and Slider",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.7.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Post Ticker Ultimate",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.7.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Trending/Popular Post Slider and Widget",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "1.8.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Meta Slider and Carousel with Lightbox",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Album and Image Gallery Plus Lightbox",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.1.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Timeline and History slider",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.4.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP Blog and Widgets",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Countdown Timer Ultimate",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.9"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Blog Designer \u2013 Post and Widget",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Team Slider and Team Grid Showcase plus Team Carousel",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.8.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Video gallery and Player",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.8.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Popup Maker and Popup Anything \u2013 Popup for opt-ins and Lead Generation Conversions",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "2.9.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Testimonial Grid and Testimonial Slider plus Carousel with Rotator Widget",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "3.5.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP Responsive Recent Post Slider/Carousel",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "3.7.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP Slick Slider and Image Carousel",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "3.7.8.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP Logo Showcase Responsive Slider and Carousel",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "3.8.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP responsive FAQ with category plugin",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "3.9.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WP News and Scrolling Widgets",
          "vendor": "essentialplugin",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.6"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Eu Joe Chegne"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Damien"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin\u0027s they acquired. This makes it possible for the threat actor to maintain a persistent backdoor and inject spam into the affected sites."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-506",
              "description": "CWE-506 Embedded Malicious Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-21T19:53:07.705Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2597724a-9a39-4e46-b153-f42366f833ba?source=cve"
        },
        {
          "url": "https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-16T18:38:10.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-04-09T00:00:00.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Essentialplugin Plugins (Various Versions) - Injected Backdoor"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-6443",
    "datePublished": "2026-04-17T06:44:49.128Z",
    "dateReserved": "2026-04-16T18:22:16.366Z",
    "dateUpdated": "2026-04-21T19:53:07.705Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-13612 (GCVE-0-2025-13612)
Vulnerability from cvelistv5
Published
2026-02-19 04:36
Modified
2026-04-08 16:50
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary
The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `aigpl-gallery-album` shortcode in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Impacted products
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-13612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-19T17:03:53.768046Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-19T17:38:20.655Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Album and Image Gallery Plus Lightbox",
          "vendor": "essentialplugin",
          "versions": [
            {
              "lessThanOrEqual": "2.1.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Muhammad Yudha - DJ"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin\u0027s `aigpl-gallery-album` shortcode in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T16:50:07.384Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/47cd99ef-d9b0-4be3-8dc4-d7dd56f37c1c?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/tags/2.1.6/includes/shortcode/aigpl-gallery-album.php#L18"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/tags/2.1.6/templates/album/design-1.php#L1"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/tags/2.1.6/templates/album/design-1.php#L38"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026old=3426388%40album-and-image-gallery-plus-lightbox\u0026new=3426388%40album-and-image-gallery-plus-lightbox\u0026sfp_email=\u0026sfph_mail="
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-11-14T00:00:00.000Z",
          "value": "Discovered"
        },
        {
          "lang": "en",
          "time": "2026-02-18T00:00:00.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Album and Image Gallery Plus Lightbox \u003c= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin\u0027s Shortcode"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2025-13612",
    "datePublished": "2026-02-19T04:36:09.665Z",
    "dateReserved": "2025-11-24T16:31:13.635Z",
    "dateUpdated": "2026-04-08T16:50:07.384Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0727 (GCVE-0-2026-0727)
Vulnerability from cvelistv5
Published
2026-02-14 06:42
Modified
2026-04-08 16:39
CWE
Summary
The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'wp_aas_save_attachment_data' and 'wp_aas_get_attachment_edit_form' functions. This makes it possible for authenticated attackers, with contributor level access and above, to read and modify attachment metadata including file paths, titles, captions, alt text, and custom links for any attachment on the site.
Impacted products
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0727",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-18T20:14:31.152757Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-18T20:14:39.611Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Accordion and Accordion Slider",
          "vendor": "essentialplugin",
          "versions": [
            {
              "lessThanOrEqual": "1.4.5",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Kazuma Matsumoto"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.5. This is due to the plugin not properly verifying that a user is authorized to perform an action in the \u0027wp_aas_save_attachment_data\u0027 and \u0027wp_aas_get_attachment_edit_form\u0027 functions. This makes it possible for authenticated attackers, with contributor level access and above, to read and modify attachment metadata including file paths, titles, captions, alt text, and custom links for any attachment on the site."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T16:39:42.849Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c5108f3-d80c-4646-8d40-3bdd1361c6ab?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/accordion-and-accordion-slider/tags/1.4.6/includes/admin/class-wp-aas-admin.php#L294"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-12-27T00:00:00.000Z",
          "value": "Discovered"
        },
        {
          "lang": "en",
          "time": "2026-01-08T18:23:44.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-02-13T18:20:34.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Accordion and Accordion Slider \u003c= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Attachment Metadata Modification"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-0727",
    "datePublished": "2026-02-14T06:42:26.388Z",
    "dateReserved": "2026-01-08T14:53:42.062Z",
    "dateUpdated": "2026-04-08T16:39:42.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-4194 (GCVE-0-2024-4194)
Vulnerability from cvelistv5
Published
2024-06-06 02:02
Modified
2026-04-08 16:50
CWE
  • CWE-94 - Improper Control of Generation of Code ('Code Injection')
Summary
The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Impacted products
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:wponlinesupport:album_and_image_gallery_plus_lightbox:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "album_and_image_gallery_plus_lightbox",
            "vendor": "wponlinesupport",
            "versions": [
              {
                "lessThanOrEqual": "2.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-4194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-02T15:16:35.008248Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-02T20:00:20.537Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:33:52.852Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4822f1c7-3f83-416c-8957-17e4b53d7e69?source=cve"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/trunk/includes/shortcode/aigpl-gallery-album-slider.php#L207"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/trunk/includes/shortcode/aigpl-gallery-album.php#L185"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Album and Image Gallery Plus Lightbox",
          "vendor": "essentialplugin",
          "versions": [
            {
              "lessThanOrEqual": "2.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Matthew Rollings"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T16:50:09.186Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4822f1c7-3f83-416c-8957-17e4b53d7e69?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/trunk/includes/shortcode/aigpl-gallery-album-slider.php#L207"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/album-and-image-gallery-plus-lightbox/trunk/includes/shortcode/aigpl-gallery-album.php#L185"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026old=3097986%40album-and-image-gallery-plus-lightbox\u0026new=3097986%40album-and-image-gallery-plus-lightbox\u0026sfp_email=\u0026sfph_mail="
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-06-05T00:00:00.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "Album and Image Gallery plus Lightbox \u003c= 2.0 - Unauthenticated Arbitrary Shortcode Execution"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2024-4194",
    "datePublished": "2024-06-06T02:02:57.036Z",
    "dateReserved": "2024-04-25T15:27:36.525Z",
    "dateUpdated": "2026-04-08T16:50:09.186Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}