CVE-2022-4060

The User Post Gallery WordPress plugin, versions 2.19 and earlier , is vulnerable to Remote Code Execution (RCE) . The root cause is an insufficient authorization procedure where the plugin fails to limit which callback functions can be invoked by users. This allows unauthenticated attackers to e...