PHP Object Injection Vulnerability in Gallery Plugin by BestWebSoft for WordPress

CVE-2024-13906

Summary

The Gallery plugin by BestWebSoft for WordPress is susceptible to PHP Object Injection through the ‘import_gallery_from_csv’ functionality. This vulnerability is present in all versions up to 4.7.3 and may allow authenticated attackers with Administrator-level access to inject a PHP object via the deserialization of untrusted input. While there is no known Property-Oriented Programming (POP) chain in the affected software itself, the vulnerability's risk escalates if an additional plugin or theme with a POP chain is installed. If such a chain is present, attackers may exploit it to perform unauthorized actions, including deleting files, accessing sensitive information, or executing arbitrary code.

References