PT-2025-47703 · WordPress · Wp Audio Gallery

Published 2025-11-21 · Updated 2025-11-26 · CVE-2025-13322

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP AUDIO GALLERY plugin for WordPress versions prior to 2.1

Description The WP AUDIO GALLERY plugin for WordPress is susceptible to arbitrary file deletion. This is caused by inadequate file path validation within the wpag uploadaudio callback() AJAX handler, specifically concerning the audio upload parameter before it is passed to the unlink() function. This allows authenticated attackers with subscriber-level access or higher to delete arbitrary files on the server. Deletion of critical files, such as wp-config.php, can lead to remote code execution.

Recommendations Update the WP AUDIO GALLERY plugin to version 2.1 or later.

Fix

RCE

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-13322

Affected Products

Wp Audio Gallery

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-13322 · Security Note
• https://twitter.com/gothburz/status/1992050773652332634 · Twitter Post
• https://t.me/CVEtracker/37915 · Telegram Post
• https://plugins.trac.wordpress.org/browser/wp-audio-gallery/tags/2.0/wp-audio-gallery.php#L607 · Note
• https://plugins.trac.wordpress.org/browser/wp-audio-gallery/tags/2.0/wp-audio-gallery.php#L150 · Note
• https://twitter.com/VulmonFeeds/status/1991796201075753248 · Twitter Post
• https://twitter.com/cracbot/status/1993635899029246058 · Twitter Post
• https://twitter.com/CVEnew/status/1991784282377826625 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/101675ae-88cf-42fc-b9ea-5dd37cdf7464?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-audio-gallery/tags/2.0/wp-audio-gallery.php#L513 · Note
• https://twitter.com/ZeroPathLabs/status/1991792404291059949 · Twitter Post