PT-2025-47040 · WordPress · Image Gallery – Photo Grid & Video Gallery
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
The Image Gallery – Photo Grid & Video Gallery versions prior to 2.12.29
Description
The Image Gallery – Photo Grid & Video Gallery plugin for WordPress has a flaw that allows for the deletion of arbitrary files. This is due to inadequate validation of file paths within the
ajax import file function. Attackers with author-level access or higher can exploit this to move image files on the server.Recommendations
Update The Image Gallery – Photo Grid & Video Gallery plugin to version 2.12.29 or later.
Correção
Improper Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Image Gallery – Photo Grid & Video Gallery