Vendor
An unauthenticated access control vulnerability in the Modula Image Gallery WordPress plugin (<= 3.0.1) allows attackers to enumerate private gallery contents and download images via insecure meta tag generation.