A critical vulnerability in the Photo Gallery, Sliders, Proofing and Themes plugin allows authenticated users with gallery management privileges to execute arbitrary code on the server.

This flaw, identified as CWE-434, stems from improper file extension validation during archive extraction, where a reused variable causes security checks to be bypassed. The attack requires the user to possess gallery management capabilities previously granted by an administrator.

Successful exploitation of this vulnerability results in full server compromise, as it allows for the upload and execution of arbitrary code within the web-accessible directory. Given the CVSS score of 7.2, this represents a high-risk scenario where an attacker can gain complete control over the web application, leading to potential data exfiltration, site defacement, or lateral movement within the hosting environment.

Immediate Action: Update the Photo Gallery, Sliders, Proofing and Themes WordPress plugin to version 4.5.0 or later immediately.

Proactive Monitoring: Review web server logs for suspicious file upload requests or the creation of new, unrecognized files within the plugin upload directories.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized file uploads or restrict access to the plugin's administrative endpoints to trusted IP addresses only.

Public Exploit Available: No

The severity of this flaw necessitates immediate attention, as it provides a direct path for attackers to gain execution privileges on the host server. Administrators must prioritize updating the plugin to version 4.5.0 to eliminate the vulnerability, as the logic error in the file handling process cannot be reliably mitigated by configuration changes alone.