Fastw3b FW Gallery Path Traversal Vulnerability Allowing Arbitrary File Deletion

Vulnerability

A path traversal vulnerability has been identified in the Fastw3b FW Gallery WordPress plugin, allowing for arbitrary file deletion. This issue affects versions through 8.0.0.

Impact

Exploitation of this vulnerability could lead to the deletion of arbitrary files from the WordPress installation, potentially including core files, which could disrupt the functionality of the website.

Remediation

Users of the FW Gallery WordPress plugin are advised to update to a version later than 8.0.0. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.

Added: Jun 17, 2025, 4:10 PM
Updated: Jun 17, 2025, 4:10 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
7.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.