Access violation vulnerability in Customizable WordPress Gallery Plugin – Modula Image Gallery 2.7.5

The Modula plugin for WordPress is vulnerable to people making changes to data without authorization. This is because of a mistake in versions of the plugin up to 2.7.4, which did not check properly whether someone had permission to save images. People with the ‘edit_others_posts’ permission, but not the ‘edit_posts’ permission, could save images even though they should not have been able to. This is not a common problem, but it could occur in some situations.