WP AUDIO GALLERY vulnerabilities

2 known vulnerabilities in WP AUDIO GALLERY from Husainali52. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WP AUDIO GALLERY: Missing Authorization

  CVE-2025-13603Feb 19, 2026Husainali52

  The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks and lack of nonce verification on the "wpag_htaccess_callback" function This ma

• 8.1 High severity

  WP AUDIO GALLERY: External Control of File Name or Path

  CVE-2025-13322Nov 21, 2025Husainali52

  The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0. This is due to the `wpag_uploadaudio_callback()` AJAX handler not properly validating user-su