High · published December 3, 2025
🚨 Oops! It turns out the Modula Image Gallery plugin is a little too trusting, allowing authenticated users with Author-level access to delete any file they wish! ⚡ Think of a restaurant where the staff can access any part of the kitchen without supervision. If an employee can decide to throw out all the ingredients, it’s not just a bad meal; it could ruin the whole restaurant! An attacker with Author-level access can delete crucial files from the server, potentially wiping out your entire WordPress setup. If they target sensitive files like wp-config.php, it could lead to complete chaos, including remote code execution and a full site compromise. Yikes!
Think of a restaurant where the staff can access any part of the kitchen without supervision. If an employee can decide to throw out all the ingredients, it’s not just a bad meal; it could ruin the whole restaurant! This vulnerability arises from insufficient file path validation in the 'ajax_unzip_file' function of the Modula Image Gallery plugin, allowing authenticated users to delete arbitrary files on the server without proper checks.
An attacker with Author-level access can delete crucial files from the server, potentially wiping out your entire WordPress setup. If they target sensitive files like wp-config.php, it could lead to complete chaos, including remote code execution and a full site compromise. Yikes! To safeguard your site, immediately update the Modula Image Gallery plugin to version 2.13.3 or later. Additionally, consider tightening your user permissions and auditing who has Author-level access. Better safe than sorry! You've got this! Stay vigilant, follow these steps, and you’ll keep your site secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| wpchill/modula_image_gallery | ≥ 2.13.1, < 2.13.3 | 2.13.3 |