Description
WordPress Plugin Responsive Media Gallery for WordPress-Everest Gallery Lite [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Responsive Media Gallery for WordPress-Everest Gallery Lite version 1.0.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.9 or latest
References
Related Vulnerabilities
XWiki Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-23619)
Drupal Core 8.x.x Denial of Service (8.0.0 - 8.6.18)
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.16)
WordPress Improper Input Validation Vulnerability (CVE-2018-20152)
WordPress Plugin Simple Download Monitor Cross-Site Scripting (3.5.3)