Question 1

What are the vulnerabilities in the Photo Gallery by 10Web plugin?

Accepted Answer

What are the vulnerabilities in the Photo Gallery by 10Web plugin?

The vulnerabilities identified are authenticated (Contributor+) Stored Cross-Site Scripting (XSS) via the 'svg' parameter and authenticated (Contributor+) Path Traversal via the esc_dir function in versions up to and including 1.8.23. These flaws allow attackers with contributor-level access or higher to inject malicious scripts or manipulate file operations on affected websites.

Question 2

How can attackers exploit these vulnerabilities?

Accepted Answer

How can attackers exploit these vulnerabilities?

Attackers can exploit the XSS vulnerability by injecting malicious scripts via specially crafted SVG files, which execute when other users access the affected page. The Path Traversal vulnerability allows attackers to manipulate file paths to read sensitive files or delete directories, potentially disrupting website functionality or exposing sensitive information.

Question 3

Who discovered these vulnerabilities?

Accepted Answer

Who discovered these vulnerabilities?

The vulnerabilities were discovered by Tobias Weißhaar (kun_19) and publicly disclosed on June 6, 2024, through the Wordfence Advisory.

Question 4

What is the risk if my website is vulnerable?

Accepted Answer

What is the risk if my website is vulnerable?

If your website is vulnerable, attackers could compromise user data, inject malicious content visible to visitors, or disrupt your site's functionality. This could harm your reputation, affect user trust, and lead to potential legal and compliance issues depending on the nature of the compromise.

Question 5

How can I check if my site is affected?

Accepted Answer

How can I check if my site is affected?

Monitor your website for any unusual behavior, such as unexpected script executions or unauthorized file access attempts logged in server logs. Regularly review plugin settings and ensure that you have the latest patched version installed to mitigate these risks.

Question 6

What should I do if my site has already been compromised?

Accepted Answer

What should I do if my site has already been compromised?

If you suspect or confirm a compromise, immediately update the Photo Gallery by 10Web plugin to the latest version (1.8.24). Conduct a thorough security audit, remove any unauthorized scripts or files, and review access logs to identify the extent of the breach. Consider consulting with a cybersecurity professional for further assistance.

Question 7

Should I continue using the Photo Gallery by 10Web plugin?

Accepted Answer

Should I continue using the Photo Gallery by 10Web plugin?

It is recommended to update to the latest patched version (1.8.24) as soon as possible. However, if you cannot update immediately, consider temporarily disabling the plugin until the update is applied to minimize exposure to potential exploits.

Question 8

What proactive measures can I take to protect my site?

Accepted Answer

What proactive measures can I take to protect my site?

Regularly update all WordPress plugins and themes to their latest versions, implement strong password policies, restrict user permissions to the minimum necessary level, and regularly monitor your site for security incidents or unusual activity.

Question 9

Are there alternative plugins I can use instead?

Accepted Answer

Are there alternative plugins I can use instead?

While waiting for the update, explore alternative plugins that offer similar gallery functionalities and are currently secure. This can provide temporary protection until you can update the Photo Gallery by 10Web plugin.

Question 10

Why is it crucial to stay updated on WordPress plugin vulnerabilities?

Accepted Answer

Why is it crucial to stay updated on WordPress plugin vulnerabilities?

Staying updated helps mitigate security risks, protects your website from potential exploits, and ensures compliance with security best practices. Prompt updates reflect a proactive approach to maintaining website security and safeguarding user data from evolving cybersecurity threats.

wordpress vulnerability

Photo Gallery by 10Web – Mobile-Friendly Image Gallery Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG & Path Traversal via esc_dir Function – CVE-2024-5426, CVE-2024-5481 | WordPress Plugin Vulnerability Report

Click to Chat Vulnerability – HoliThemes – Authenticated (Contributor+) Local File Inclusion – CVE-2024-3849 |WordPress Plugin Vulnerability Report

Advanced Database Cleaner Vulnerability – Authenticated(Administrator+) PHP Object Injection via process_bulk_action – CVE-2024-0668 | WordPress Plugin Vulnerability Report

Advanced Woo Search Vulnerability – Reflected Cross-Site Scripting – CVE-2024-0251 | WordPress Plugin Vulnerability Report

WordPress Plugin Vulnerability Report – Shortcodes Ultimate – Authenticated (Contributor+) Stored Cross-Site Scripting & Insecure Direct Object Reference to Information Disclosure – CVE-2023-6225 & CVE-2023-6226

WordPress Plugin Vulnerability Report – Paid Memberships Pro – Authenticated (Subscriber+) Arbitrary File Upload – CVE-2023-6187

WordPress Plugin Vulnerability Report – WP Customer Reviews – Authenticated (Subscriber+) Sensitive Information Exposure – CVE-2023-4686

WordPress Plugin Vulnerability Report – Booster for WooCommerce – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode – CVE-2023-5638

Recent Blog Posts

LiteSpeed Cache Vulnerability – Unauthenticated Sensitive Information Exposure via Log Files – CVE-2024-44000 | WordPress Plugin Vulnerability Report

Elementor Addon Elements Vulnerability – Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters – CVE-2024-4401, CVE-2024-7122 | WordPress Plugin Vulnerability Report

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Vulnerability – Authenticated (Contributor+) Information Disclosure – CVE-2024-7418 | WordPress Plugin Vulnerability Report

Additional Resources

About Your WP Guy