What is CVE-2024-11002?

CVE-2024-11002 is a medium-severity vulnerability in Realmag777 Inpost Gallery, classified under Code Injection. CVSS score: 6.3/10. Published 2024-11-26.

How severe is CVE-2024-11002?

Medium severity. CVSS v3 base score is 6.3 out of 10.

RCE in Realmag777 Inpost Gallery

CVE-2024-11002

The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action in all versions up to, and including, 2.1.4.2. This is due to the software allowing users…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.006 (42.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Realmag777 Inpost Gallery — versions 0

Weakness classification (CWE)

CWE-94 — Code Injection

References

www.wordfence.com/threat-intel/vulnerabilities/id/5fbb2dcf-38b8-4ef1-bfea-bf587…
plugins.trac.wordpress.org/browser/inpost-gallery/trunk/index.php
wordpress.org/plugins/inpost-gallery/
plugins.trac.wordpress.org/changeset/3192113/

Frequently asked questions

What is CVE-2024-11002?: CVE-2024-11002 is a medium-severity vulnerability in Realmag777 Inpost Gallery, classified under Code Injection. CVSS score: 6.3/10. Published 2024-11-26.
How severe is CVE-2024-11002?: Medium severity. CVSS v3 base score is 6.3 out of 10.