CVE-2024-3097: 
WordPress vulnerability analysis and mitigation

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress contains a vulnerability (CVE-2024-3097) discovered in versions up to and including 3.59. The vulnerability was publicly disclosed on April 5, 2024, and was identified by security researcher Peng Zhou. The issue stems from a missing capability check on the get_item function, affecting the plugin's data access controls (Wordfence Advisory).

The vulnerability is classified as a Missing Authorization issue (CWE-862) with a CVSS v3.1 score of 5.3 (Medium). The security flaw exists in the get_item function implementation within the plugin's REST API endpoint, where proper authorization checks are absent. This vulnerability has been assigned the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating network accessibility with low attack complexity and no privileges required (NVD).

The vulnerability allows unauthenticated attackers to extract sensitive data, including EXIF metadata and other information from any image uploaded through the NextGEN Gallery plugin. This unauthorized access to image metadata could potentially expose sensitive information embedded in uploaded images (WPScan).

The vulnerability can be exploited by unauthenticated attackers remotely without requiring any user interaction or special privileges. The attack vector is accessible over the network, making it relatively straightforward to exploit (Wordfence Advisory).

The vulnerability has been patched in version 3.59.1 of the NextGEN Gallery plugin. Website administrators are strongly advised to update to this version or later to address the security issue. No alternative workarounds have been publicly documented (WPScan).