Description
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin Wordpress Picture/Portfolio/Media Gallery version 3.0.1 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Import any XML or CSV File to WordPress Pro Multiple Vulnerabilities (4.1.1)
WordPress Plugin File Manager Cross-Site Scripting (7.0)
WordPress Plugin DukaPress SQL Injection (2.5.9)
WordPress Plugin WP Support Plus Responsive Ticket System Multiple Vulnerabilities (4.1)
Django Resource Management Errors Vulnerability (CVE-2014-0481)