Vulnerability found in Photo Gallery by 10Web – Mobile-Friendly Image Gallery

The Photo Gallery by 10Web is a plugin for WordPress that helps create mobile-friendly image galleries. However, it has a security vulnerability called “Path Traversal” that affects all versions up to 1.8.23. This means that hackers who are logged in can access and manipulate files and directories on the server, even the main WordPress folder. Usually, only administrators can do this, but in the paid version of the plugin, lower level users can also exploit this vulnerability.