Video & Photo Gallery for Ultimate Member Security & Risk Analysis

The 'gallery-for-ultimate-member' plugin v1.1.3 exhibits a concerning security posture due to a significant number of unprotected entry points and a history of severe vulnerabilities. While the code shows some good practices like a high percentage of prepared SQL statements and properly escaped output, these strengths are overshadowed by critical weaknesses. The static analysis reveals 18 unprotected AJAX handlers out of 20, creating a large attack surface for potential unauthorized actions. Furthermore, the taint analysis identified 6 high-severity flows with unsanitized paths, indicating a risk of sensitive data exposure or manipulation.

The vulnerability history is particularly alarming, with 4 known CVEs, including one high-severity unpatched vulnerability. The common types of past vulnerabilities (SQL Injection, SSRF, Unrestricted Uploads, XSS) suggest a pattern of issues related to improper input validation and handling, which are exacerbated by the identified unsanitized paths in the current version. The most recent vulnerability being from April 2025 is also a red flag, hinting at potential ongoing or recurring security flaws.

In conclusion, while the plugin has some positive security attributes, the high number of unprotected entry points, critical taint flows, and a history of serious, often recurring, vulnerability types make this plugin a significant risk. The presence of an unpatched high-severity vulnerability further elevates the urgency for remediation. Users should exercise extreme caution and consider disabling or replacing this plugin until these issues are addressed.