Photo Gallery by WD <= 1.3.42 - Authenticated Path Traversal

2017-06-1600:00:00

ethicalhack3r

wpscan.com

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Authenticated Path Traversal security vulnerability.

References

plugins.trac.wordpress.org/changeset/1667128/photo-gallery

security.dxw.com/advisories/path-traversal-in-photo-gallery-may-allow-admins-to-read-most-files-on-the-filesystem/