Threats tagged 'ghsa-c42p-mjmp-r2p3'

The Image Gallery – Photo Grid & Video Gallery plugin for WordPress contains a vulnerability in the ajax_import_file function that allows authenticated users with author-level access or higher to delete arbitrary files on the server due to insufficient file path validation. This affects all versions up to and including 2.12.28.