CVE-2023-3155

Summary

CVE-2023-3155 is a vulnerability affecting the WordPress Gallery Plugin before version 3.39. This issue arises due to insufficient input parameter validation within the `gallery_edit` function, permitting an attacker to manipulate file read and delete operations, potentially granting unauthorized access to server resources. This vulnerability poses a significant risk, as an attacker could exploit it to gain sensitive information or disrupt website functionality. It is strongly recommended that users upgrade to the latest version of the WordPress Gallery Plugin to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.