CVE-2025-23942

Name of the Vulnerable Software and Affected Versions NgocCode WP Load Gallery versions 2.1.6 and earlier

Description The issue allows unrestricted upload of files with dangerous types, enabling attackers to upload a web shell to a web server. This can be exploited by uploading malicious files, potentially leading to server compromise. The estimated number of potentially affected devices is not specified.

Recommendations For NgocCode WP Load Gallery versions 2.1.6 and earlier, update to version 2.1.7 to patch this issue. As a temporary workaround, consider restricting file uploads to prevent exploitation until the update can be applied.