CVE-2025-23942

Summary

CVE-2025-23942 is a newly disclosed vulnerability that affects WP Load Gallery, a popular WordPress plugin used for managing and displaying image galleries. The issue involves an Unrestricted File Upload vulnerability, enabling attackers to upload a web shell to a web server. This potentially dangerous type of file can then be executed arbitrarily, leading to serious security implications. The vulnerability affects WP Load Gallery from versions not later than 2.1.6. It is crucial for users to update to the latest version or implement appropriate security measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.