Executive Summary

This vulnerability exists in the All-in-One Video Gallery WordPress plugin (up to version 4.5.7) and allows authenticated users with author-level access or higher to upload arbitrary files to the server. The issue arises because the plugin insufficiently validates file types, specifically allowing files with double extensions to bypass sanitization by being accepted as valid VTT files. This can lead to attackers uploading malicious files that may enable remote code execution on the affected site. [1]

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow an attacker with author-level access or above to upload arbitrary files, potentially including malicious scripts, to the server hosting the WordPress site. This can lead to remote code execution, compromising the server, stealing data, defacing the website, or using the server as a launch point for further attacks. [1]

Useful 0 Not Useful 0

Mitigation Strategies

Update the All-in-One Video Gallery WordPress plugin to version 4.6.4 or later, which includes a comprehensive security patch addressing CVE-2025-12957. This update modifies core plugin PHP files, admin interface scripts, public-facing assets, and other components to fix the arbitrary file upload vulnerability. Ensuring the plugin is updated will mitigate the risk of authenticated attackers uploading arbitrary files and potentially executing remote code. [1]

Useful 0 Not Useful 0