CVE-2024-12114 – This vulnerability in the FooGallery WordPress ... (How to Fix)

Q: What is the severity of CVE-2024-12114?

CVE-2024-12114 has a CVSS score of 4.3 (MEDIUM). This vulnerability in the FooGallery WordPress plugin allows authenticated attackers with gallery creator access or higher to modify arbitrary posts and pages via an insecure direct object reference flaw. It affects all versions up to 2.4.29 when the Gallery Creator Role is set below 'Editor' level. Attackers can exploit this to deface websites or inject malicious content.

📋 TL;DR

This vulnerability in the FooGallery WordPress plugin allows authenticated attackers with gallery creator access or higher to modify arbitrary posts and pages via an insecure direct object reference flaw. It affects all versions up to 2.4.29 when the Gallery Creator Role is set below 'Editor' level. Attackers can exploit this to deface websites or inject malicious content.

💻 Affected Systems

Products:

FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel for WordPress

Versions: All versions up to and including 2.4.29

Operating Systems: Any OS running WordPress

Default Config Vulnerable: ✅ No

Notes: Only vulnerable when Gallery Creator Role setting is below 'Editor' level. Requires authenticated access with gallery permissions.

📦 What is this software?

Foogallery by Fooplugins

View all CVEs affecting Foogallery →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Attackers could deface entire websites, inject malicious scripts, or modify critical content across all posts and pages, potentially leading to credential theft or malware distribution.

🟠

Likely Case

Limited content modification by authenticated users with gallery permissions, resulting in defaced pages or injected advertisements/links.

🟢

If Mitigated

No impact if Gallery Creator Role is set to 'Editor' or higher, or if the plugin is patched/disabled.

🌐 Internet-Facing: MEDIUM

🏢 Internal Only: LOW

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: LOW

Exploitation requires authenticated access with gallery creator role or higher. The vulnerability is in the foogallery_attachment_modal_save AJAX action via the img_id parameter.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 2.4.30

Vendor Advisory: https://plugins.trac.wordpress.org/changeset/3250684/foogallery/tags/2.4.30/includes/admin/class-gallery-attachment-modal.php

Restart Required: No

Instructions:

1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find FooGallery and click 'Update Now'. 4. Verify version is 2.4.30 or higher.

🔧 Temporary Workarounds

Restrict Gallery Creator Role

all

Set Gallery Creator Role to 'Editor' or higher in plugin settings to prevent exploitation.

Disable Vulnerable AJAX Action

linux

Remove or restrict access to the foogallery_attachment_modal_save AJAX endpoint via .htaccess or security plugin.

# Add to .htaccess:
<Files "admin-ajax.php">
    <IfModule mod_authz_core.c>
        Require all denied
    </IfModule>
    <IfModule !mod_authz_core.c>
        Order deny,allow
        Deny from all
    </IfModule>
</Files>

🧯 If You Can't Patch

Set Gallery Creator Role to 'Editor' or higher in plugin settings.
Temporarily disable the FooGallery plugin until patching is possible.

🔍 How to Verify

Check if Vulnerable:

Check WordPress admin → Plugins → Installed Plugins for FooGallery version. If version is 2.4.29 or lower, the site is vulnerable.

Check Version:

wp plugin list --name=foogallery --field=version

Verify Fix Applied:

Confirm FooGallery version is 2.4.30 or higher in WordPress admin panel.

📡 Detection & Monitoring

Log Indicators:

Unusual POST requests to /wp-admin/admin-ajax.php with action=foogallery_attachment_modal_save
Multiple post/page modifications by users with gallery roles

Network Indicators:

HTTP POST requests containing 'img_id' parameter to admin-ajax.php endpoint

SIEM Query:

source="web_logs" AND uri="/wp-admin/admin-ajax.php" AND method="POST" AND params.action="foogallery_attachment_modal_save"

📊 Metadata

CVE ID: CVE-2024-12114

CVSS v3 Score: 4.3 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE: CWE-639

EPSS Score: 0.11% exploit probability (30.1th percentile)

Published: March 8, 2025

Last Updated: March 12, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-12114, you might also want to check these: