Medium severity · published Apr 11, 2022
CVE-2021-25090
The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any…
5.4
CVSS
0.6%
EPSS
No
On KEV
Description
The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call them. Due to the lack of sanitisation and escaping, it could also allows attackers to perform Cross-Site Scripting attacks on pages where a Portfolio is embed
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PG
Portfolio Gallery, Product Catalog - Grid Kit Portfolio · Wpsofts
before 2.1.0 · source: NVD
Affected product
PG
Portfolio Gallery, Product Catalog - Grid Kit Portfolio
Wpsofts
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-25090
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-25090
Exploit
https://wpscan.com/vulnerability/32a4a2b5-ef65-4e29-af4a-f003dbd0809c
More from Portfolio Gallery, Product Catalog - Grid Kit Portfolio
6.4
CVE-2025-5092
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
6.1
CVE-2023-3292
The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site…