Threats tagged 'ghsa-x557-gw6m-864x'

The Responsive Lightbox & Gallery plugin for WordPress contains a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 2.5.3. This flaw exists in the 'get_image_size_by_url' function due to insufficient validation of user-supplied URLs. Authenticated users with Author-level access or higher can exploit this to make arbitrary web requests from the server, potentially accessing or modifying internal services.