WordPress Contest Gallery Plugin Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the WordPress Contest Gallery plugin, specifically in versions through 28.1.2.2. This vulnerability allows for authentication abuse, enabling unauthorized users to perform actions typically reserved for higher-privileged users, potentially leading to admin access on the website.

Impact

Exploitation of this vulnerability could allow an unauthorized user to gain administrative privileges on the affected WordPress site.

Remediation

Users of the WordPress Contest Gallery plugin should update to version 28.1.3 or later. Patchstack users can enable auto-update for vulnerable plugins.