WordPress plugin nextgen-galery跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plug-in. WordPress plugin nextgen-galery version 2.0.77.3 previously contained a cross-site request forgery vulnerability, which stems from a failure to validate user-uploaded files. An attacker could exploit this vulnerability to gain full access to the web application.