CyberRota Analysis
AI-GeneratedThe Modula Image Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents, allowing unauthenticated attackers to access and enumerate private gallery posts and their attachments. This vulnerability arises from insufficient validation in the Modula_Meta::add_metas() function, which fails to check the gallery's post status or the requester's permissions, exposing sensitive information through Open Graph and Twitter meta tags. WordPress site administrators using this plugin should prioritize patching to mitigate the risk of data exposure.
Original NVD Description
The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the Modula_Meta::add_metas() function being hooked to wp_head on every frontend request and looking up any post via get_post( $_GET['modula_gallery_id'] ) without verifying the gallery's post_status or the requester's capability to read it — the gallery-side input guard is bugged (empty('modula_gallery_id') tests a nonempty string literal instead of the GET parameter, so it is always false), the only object validation is a post_type === 'modula-gallery' check, and no is_user_logged_in()/current_user_can('read_post', $gallery_id) check is performed. This makes it possible for unauthenticated attackers to enumerate private modula-gallery posts and their member attachments and recover the image's title, description, dimensions, and original upload URL via Open Graph/Twitter meta tags emitted in the response, which then allows direct unauthenticated download of the original private image bytes.