All-in-One Video Gallery WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file upload has been identified in the All-in-One Video Gallery plugin for WordPress, affecting all versions through 4.5.7. The issue arises from inadequate validation of file types, particularly VTT files, which allows double extension files to evade proper sanitization while being recognized as valid VTT files. This flaw enables authenticated attackers with author-level access or higher to upload arbitrary files to the server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the potential for remote code execution, depending on the nature of the uploaded file.

Remediation

Users are advised to update the All-in-One Video Gallery plugin to version 4.6.4 or a newer patched version.