The Modula Image Gallery – Photo Grid & Video Gallery plugin is vulnerable to a lack of authorization checks in the add_metas function, which is executed on every frontend request. Unsurprisingly, the function retrieves a gallery post by reading the query parameters modula_gallery_id and modula_image_id without verifying the post's visibility or whether the requestor has permission to view it. As a result, an unauthenticated user can query private gallery entries, obtain Open Graph and Twitter meta tags that include the image title, description, dimensions and the original upload URL, and thereby download the private image file directly.

WordPress sites that use the WordPress plugin wpchill Modula Image Gallery – Photo Grid & Video Gallery are affected when the plugin is installed at version 3.0.1 or earlier. No other versions beyond 3.0.1 are mentioned as affected. If you are running the plugin on a production site, determine the exact version being used and verify whether it falls into this range.

The CVSS score of 7.5 classifies this flaw as a high severity information disclosure vulnerability. The EPSS score is not available, but the issue is not listed in the CISA KEV catalog, implying no known widespread exploitation campaigns. An attacker only needs to target the public site, craft a URL containing modula_gallery_id and optionally modula_image_id, and request the page. No authentication or elevated privileges are necessary, and the exploit does not require any complex prerequisites. The result is direct access to the full unencrypted image file, compromising confidentiality of protected media.