CVE-2022-4060

CVE-2022-4060 affects WordPress plugin “User Post Gallery” up to version 2.19. The Nuclei template and multiple sources describe a remote code execution vulnerability caused by the plugin not restricting which callbacks can be invoked by users, enabling unauthenticated attackers to run arbitrary ...