FooGallery Plugin Vulnerable to Directory Traversal

CVE-2023-6947

What is CVE-2023-6947?

The FooGallery plugin, widely used for enhancing image galleries on WordPress websites, is vulnerable to a Directory Traversal exploit. This vulnerability affects all versions up to and including 2.4.26. Authenticated users with contributor level access or higher are able to traverse the directory structure, potentially revealing sensitive information contained within server folders. This exposure poses risks for data privacy and server security, necessitating immediate attention from site administrators using this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References