Description
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin Wordpress Picture/Portfolio/Media Gallery version 3.0.1 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2007-1325)
WordPress Plugin Anti Spam Protection without CAPTCHA powered by Keypic Security Bypass (2.1.2)
WordPress Plugin Daily Prayer Time SQL Injection (2022.02.28)
WordPress Plugin Google Map Generator Cross-Site Scripting (1.3.1)
WordPress Plugin Header Footer Code Manager SQL Injection (1.1.13)