FooGallery Plugin Vulnerable to Directory Traversal

CVE-2023-6947

What is CVE-2023-6947?

The FooGallery plugin, widely used for enhancing image galleries on WordPress websites, is vulnerable to a Directory Traversal exploit. This vulnerability affects all versions up to and including 2.4.26. Authenticated users with contributor level access or higher are able to traverse the directory structure, potentially revealing sensitive information contained within server folders. This exposure poses risks for data privacy and server security, necessitating immediate attention from site administrators using this plugin.

References