The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.Referenceshttps://wordpress.org/plugins/insta-gallery/#developershttps://wpvulndb.com/vulnerabilities/9853
