Arbitrary File Deletion in WP AUDIO GALLERY Plugin for WordPress

CVE-2025-13322

What is CVE-2025-13322?

The WP AUDIO GALLERY plugin for WordPress contains a vulnerability that allows for arbitrary file deletion due to inadequate validation of file paths. Specifically, the wpag_uploadaudio_callback() AJAX handler fails to properly check the paths provided by users via the audio_upload parameter before these paths are passed to the unlink() function. This shortcoming enables authenticated attackers, who possess subscriber-level access or higher, to delete critical files on the server. Such deletions could lead to severe repercussions, including potential remote code execution if vital files like wp-config.php are compromised.

References