High · published December 6, 2025
⚡ An unchecked file upload can spell trouble! The All-in-One Video Gallery plugin for WordPress is letting authenticated users with Author-level access upload any file type — no questions asked! Think of it like a hotel that allows guests to check in without confirming their identity or what bags they’re bringing. One guest could slip in a suitcase full of trouble, potentially wreaking havoc on the whole establishment! With this vulnerability, an attacker could upload malicious files that may enable remote code execution, leading to a complete compromise of the affected site. This means they can manipulate data, steal sensitive information, or even take control of the entire server. Absolutely devastating!
Think of it like a hotel that allows guests to check in without confirming their identity or what bags they’re bringing. One guest could slip in a suitcase full of trouble, potentially wreaking havoc on the whole establishment! The issue lies in the 'resolve_import_directory()' function, which fails to validate file types, allowing any authenticated user with appropriate access to upload arbitrary files. Versions 4.5.4 to 4.5.7 of the plugin are affected.
With this vulnerability, an attacker could upload malicious files that may enable remote code execution, leading to a complete compromise of the affected site. This means they can manipulate data, steal sensitive information, or even take control of the entire server. Absolutely devastating! To protect your site, immediately update the All-in-One Video Gallery plugin to version 4.5.8 or later. Additionally, consider implementing stricter file type validation in your configurations. Regularly review permissions for user roles to limit access. 🛡️ You've got this! Stay vigilant, follow these steps, and you'll keep your site safe and sound! 🚀