CVE-2023-6947

Summary

CVE-2023-6947 is a directory traversal vulnerability affecting the FooGallery plugin for WordPress. This issue, present in all versions up to 2.4.26, allows authenticated contributors or higher level users to access the contents of arbitrary folders on the server. By exploiting this weakness, attackers can gain sensitive information, including folder structures, potentially leading to further security compromises. It is crucial that users update their FooGallery plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.