CVE-2019-15779: Quadlayers Wp Social Feed Gallery

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.

Affected products

• Quadlayers Wp Social Feed Gallery: before 2.4.8 (fixed in 2.4.8)

Published 2019-08-29. Last modified 2026-06-17.