Jesus Ramirez Pichardo has reported a vulnerability in the Tribulant Slideshow Gallery plugin for WordPress, which can be exploited by malicious users to compromise a vulnerable system.
The vulnerability is caused due to the application not properly validating uploaded file types when handling slides, which can be exploited to upload and execute arbitrary PHP code.
Successful exploitation of this vulnerability requires "Manage Slides" privileges.
The vulnerability is reported in versions prior to 1.4.7.
