CVE-2024-11501

The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

• CWE-502

• https://plugins.trac.wordpress.org/browser/multi-gallery/tags/1.3/partials/Shortcode.php#L21
• https://www.wordfence.com/threat-intel/vulnerabilities/id/778f7d9b-6376-4026-a291-1fedeabe8c99?source=cve

Published

Dec 7, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11495Buffer overflow vulnerability in OllyDbg, version 1.10, whic…7.8
• CVE-2024-11496The Infility Global plugin for WordPress is vulnerable to un…6.5
• CVE-2024-11497An authenticated attacker can use this vulnerability to perf…8.8
• CVE-2024-11498There exists a stack buffer overflow in libjxl. A specifical…7.5
• CVE-2024-11499A vulnerability exists in RTU500 IEC 60870-4-104 controlled …6.9
• CVE-2024-1150Improper Verification of Cryptographic Signature vulnerabili…5.5
• CVE-2024-11502The Planning Center Online Giving WordPress plugin through 1…5.4
• CVE-2024-11503The WP Tabs WordPress plugin before 2.2.7 does not sanitise…6.1
• CVE-2024-11504Input from multiple fields in Streamsoft Prestiż is not sani…8.6
• CVE-2024-11505Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-11506IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Ex…7.8
• CVE-2024-11507IrfanView DXF File Parsing Type Confusion Remote Code Execut…7.8