Input validation vulnerability in Gantry 4 Framework 4.1.3

The Gantry Web Theme Framework for WordPress is a popular tool used to create and manage websites. Unfortunately, there is a security vulnerability in versions up to, and including, version 4.1.3 that allows attackers with minimal privileges, such as a subscriber, to execute code on the server. This vulnerability is triggered when an attacker passes a special type of data, in the form of a JSON, to the $_POST[‘data’] variable, which can then be used to execute code on the server. To stay secure, users should upgrade to a version of Gantry that is newer than 4.1.3.