CVE-2023-33995

MEDIUM 4.3CVE-2023-33995 · Published 13/12/2024 · updated 17/06/2026

In short

CVE-2023-33995 is a MEDIUM (CVSS 4.3) vulnerability affecting photo gallery (10web).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.6% of all vulnerabilities.
Fix: update to 1.8.16 or later.

Package	Affected versions	Patched versions
photo gallery 10web	`< 1.8.16`	`1.8.16`

Description

Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.

References

patchstack.com/database/wordpress/plugin/photo-gallery/vulnerability/wordpress-photo-gallery-by-10web-plugin-1-8-15-broken-access-control-vulnerability · Third Party Advisory

More vulnerabilities in photo gallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photo gallery

10web

< 1.8.16

1.8.16

More vulnerabilities in photo gallery

See all →