GalleryCreator SimpLy Gallery Plugin Arbitrary Code Execution Vulnerability

A vulnerability allowing arbitrary code execution has been identified in the GalleryCreator SimpLy Gallery plugin, specifically in versions through 3.3.2. This issue arises from improper validation of input quantities, which leads to functionality being accessible without proper access control restrictions.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected WordPress site.

Remediation

Users of the SimpLy Gallery plugin should update to version 3.3.2.1 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.