Vulnerability in 10Web's Mobile-Friendly Image Gallery Plugin Allows Attackers to Access Sensitive Information and Delete Directories

CVE-2024-5481

Summary

The Photo Gallery by 10Web, a popular mobile-friendly image gallery plugin for WordPress, is affected by a Path Traversal vulnerability that affects all versions up to and including 1.8.23. This vulnerability arises from the esc_dir function, allowing authenticated attackers to manipulate file system operations by accessing arbitrary files on the server. Attackers can potentially copy sensitive information from these files or delete directories, including critical folders in the WordPress root. Although by default this issue is primarily exploitable by administrators, users with gallery edit permissions, including lower-level contributors in the premium version, may also be at risk. This vulnerability places the integrity and confidentiality of web servers at significant risk and highlights the importance of proper user permission management.

References