WordPress PostGallery plugin <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Moose Love - Nagasaki Prefectural University in WordPress Plugin PostGallery versions = 1.12.5...

CVE-2025-13543

creationtimestamp| type| source ---|---|--- 2025-11-22 15:36:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60502 2025-12-04 23:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7743luvc62q 2025-12-05 03:10:07+00:00| seen|...