Description
WordPress Plugin Social Gallery and Widget is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin's configuration. WordPress Plugin Social Gallery and Widget version 2.2.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.3 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:181A729E-FFFE-457C-9E8D-A4343FD2E630
https://plugins.svn.wordpress.org/catch-instagram-feed-gallery-widget/trunk/README.txt
Related Vulnerabilities
Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)
Oracle JRE CVE-2013-2416 Vulnerability (CVE-2013-2416)
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
WordPress Plugin WP Survey And Quiz Tool 'rowcount' Parameter Cross-Site Scripting (2.9.2)