CVE-2024-35720 – This CVE describes a Missing Authorization (Bro... (How to Fix)

📋 TL;DR

This CVE describes a Missing Authorization (Broken Access Control) vulnerability in the Album Gallery WordPress plugin. It allows unauthorized users to perform actions that should require authentication, affecting WordPress sites using vulnerable versions of this plugin.

💻 Affected Systems

Products:

Album Gallery – WordPress Gallery

Versions: n/a through 1.5.7

Operating Systems: Any OS running WordPress

Default Config Vulnerable: ⚠️ Yes

Notes: Affects all WordPress installations using vulnerable versions of the plugin regardless of configuration.

📦 What is this software?

Album Gallery by Awplife

View all CVEs affecting Album Gallery →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Unauthenticated attackers could modify gallery content, delete images, or potentially escalate privileges to gain administrative access to the WordPress site.

🟠

Likely Case

Unauthorized users could modify or delete gallery content, disrupting website functionality and potentially defacing the site.

🟢

If Mitigated

With proper access controls and authentication checks, only authorized users can perform gallery management actions.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Missing authorization vulnerabilities typically require minimal technical skill to exploit once the attack vector is identified.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 1.5.8 or later

Vendor Advisory: https://patchstack.com/database/vulnerability/new-album-gallery/wordpress-album-gallery-wordpress-gallery-plugin-1-5-7-broken-access-control-vulnerability

Restart Required: No

Instructions:

1. Log into WordPress admin panel
2. Navigate to Plugins → Installed Plugins
3. Find 'Album Gallery – WordPress Gallery'
4. Click 'Update Now' if update is available
5. Alternatively, download version 1.5.8+ from WordPress repository and manually update

🔧 Temporary Workarounds

Disable vulnerable plugin

all

Temporarily disable the Album Gallery plugin until patched

wp plugin deactivate album-gallery

Restrict access via web application firewall

all

Block unauthorized access to gallery management endpoints

🧯 If You Can't Patch

Implement strict access controls and authentication checks at the web server level
Monitor for unauthorized gallery modifications and implement alerting

🔍 How to Verify

Check if Vulnerable:

Check WordPress admin panel → Plugins → Album Gallery – WordPress Gallery version

Check Version:

wp plugin get album-gallery --field=version

Verify Fix Applied:

Verify plugin version is 1.5.8 or higher in WordPress admin

📡 Detection & Monitoring

Log Indicators:

Unauthorized POST requests to gallery management endpoints
Gallery modifications from unauthenticated IP addresses

Network Indicators:

Unusual traffic patterns to /wp-content/plugins/album-gallery/ endpoints

SIEM Query:

source="wordpress" AND (uri_path="/wp-admin/admin-ajax.php" OR uri_path CONTAINS "/album-gallery/") AND http_method="POST" AND user="-"

📊 Metadata

CVE ID: CVE-2024-35720

CVSS v3 Score: 4.3 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE: CWE-862

Published: June 10, 2024

Last Updated: November 21, 2024

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-35720, you might also want to check these: