Unrestricted File Upload Vulnerability in Powerplay Gallery Plugin for WordPress

CVE-2015-5681

Summary

The Powerplay Gallery plugin version 3.3 for WordPress is susceptible to an unrestricted file upload vulnerability. This flaw allows malicious actors to upload files with executable extensions. Once uploaded, these files can be accessed directly, potentially enabling attackers to execute arbitrary code on the server. This vulnerability raises significant security concerns for any site using this plugin, as it opens up pathways for unauthorized access and exploitation.

References