WordPress · Nextgen Gallery · CVE-2015-1785
**Name of the Vulnerable Software and Affected Versions**
nextgen-galery wordpress plugin versions prior to 2.0.77.3
**Description**
The issue lies in the validation of user-uploaded files and the lack of security measures to prevent unwanted HTTP requests, allowing an attacker to gain full access to the web application.
**Recommendations**
For versions prior to 2.0.77.3, update to version 2.0.77.3 or later to resolve the issue. As a temporary workaround, consider restricting access to file upload functionality and limiting HTTP requests to essential ones until the update is applied.