{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/modula-image-gallery--photo-grid--video-gallery--3.0.11/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wp-modula:modula:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-107659"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Modula Image Gallery – Photo Grid \u0026 Video Gallery (\u003c= 3.0.11)"],"_cs_severities":["high"],"_cs_tags":["wordpress","information-disclosure","rest-api","vulnerability"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe Modula Image Gallery - Photo Grid \u0026amp; Video Gallery plugin for WordPress (versions up to and including 3.0.11) contains a sensitive information exposure vulnerability identified as CVE-2026-107659. The issue exists due to inconsistent REST API security controls. While the plugin correctly redacts sensitive data in its own custom API endpoint (/wp-json/modula/v2/gallery/{id}/settings) via the redact_settings_for_public() function, it fails to implement the same protection for the core WordPress REST API endpoint (/wp-json/wp/v2/modula-gallery/{id}).\u003c/p\u003e\n\u003cp\u003eBecause the plugin registers its custom post type with 'show_in_rest' set to true, the core WordPress API exposes the plugin's metadata. Unauthenticated attackers can query this endpoint to retrieve the 'modulaSettings' field, which contains plaintext usernames and passwords used for password-protecting galleries. This exposure allows unauthorized access to private gallery content if those credentials are reused elsewhere. Defenders should monitor for unauthenticated requests targeting the vulnerable REST API endpoints.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows unauthenticated attackers to exfiltrate plaintext credentials (usernames and passwords) associated with password-protected galleries. This can lead to unauthorized access to gallery contents and potential credential stuffing attacks if users reuse these passwords on other systems. Given the prevalence of WordPress plugins in enterprise environments, the exposure of these credentials creates a significant risk of data breach and lateral movement.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Modula Image Gallery - Photo Grid \u0026amp; Video Gallery plugin to the latest version immediately once a patch is released (version \u0026gt; 3.0.11).\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for unauthenticated GET requests targeting /wp-json/wp/v2/modula-gallery/ that return a 200 OK status.\u003c/li\u003e\n\u003cli\u003eAudit existing WordPress installations to identify and remove stored credentials in gallery settings if they have been exposed.\u003c/li\u003e\n\u003cli\u003eBlock or restrict access to the WordPress REST API for untrusted IP ranges if the functionality is not required globally.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-16T06:25:22Z","date_published":"2026-10-16T06:25:22Z","id":"https://feed.craftedsignal.io/briefs/2026-10-modula-gallery-exposure/","summary":"The Modula Image Gallery plugin for WordPress is vulnerable to unauthenticated information exposure via the REST API, allowing attackers to retrieve plaintext credentials for password-protected galleries.","title":"Sensitive Information Exposure in Modula Image Gallery Plugin","url":"https://feed.craftedsignal.io/briefs/2026-10-modula-gallery-exposure/"}],"language":"en","title":"CraftedSignal Threat Feed - Modula Image Gallery – Photo Grid \u0026 Video Gallery (\u003c= 3.0.11)","version":"https://jsonfeed.org/version/1.1"}