XSS vulnerabilities Discovered in 10Web Photo Gallery WordPress Plugin < 1.5.46

10Web Photo Gallery WordPress Plugin has 300,000+ active installations. This popular plugin is used for building beautiful mobile-friendly galleries. In versions prior to 1.5.46, there is a vulnerability that allows attackers to download arbitrary files from victim sites.

The issue has been fixed in Version 1.5.47 which is available now from the WordPress Plugin Repo.