butterflymedia ImagePress – Image Gallery

• CVE-2024-9776 Medium 4.4 ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings 0.4%
• CVE-2024-9824 Medium 4.3 ImagePress - Image Gallery <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update 0.3%
• CVE-2024-9778 Medium 4.3 ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update 0.3%