FooGallery WordPress Plugin Insecure Direct Object Reference Vulnerability Allowing Arbitrary Post Updates

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in the FooGallery WordPress plugin, specifically in versions through 2.4.29. The issue arises in the foogallery_attachment_modal_save AJAX action, where validation is lacking on a user-controlled key (img_id). This vulnerability enables authenticated attackers with the appropriate access level to modify arbitrary post and page content. However, for this vulnerability to have a significant impact, the Gallery Creator Role setting must be below 'Editor'.

Impact

Exploitation of this vulnerability allows authenticated users with the appropriate role to update any post or page, potentially leading to unauthorized content changes or the introduction of malicious elements.

Remediation

Users are advised to update the FooGallery plugin to version 2.4.30 or later.