CVE-2026-81651 Details
Description
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management capability by an administrator to overwrite the stored settings of any gallery on the site, including its filesystem path, and including galleries belonging to other users.
A vulnerability exists in the NextGEN Gallery WordPress plugin in versions prior to 4.5.0. The issue arises because the plugin does not ensure that a user saving a gallery is the rightful owner. This flaw allows any user with gallery-management capabilities, granted by an administrator, to overwrite the settings of any gallery on the site. The vulnerability extends to modifying the gallery's filesystem path and affects galleries belonging to other users.
Users are advised to update the NextGEN Gallery WordPress plugin to version 4.5.0 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 20, 2026CISA-ADP
Assessed Sep 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://wpscan.com/vulnerability/69ccebff-414d-49bb-b914-cae87ab27f4f/ | [email protected] | AdvisoryExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Photo Gallery, Sliders, Proofing | < 4.5.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 20, 2026 | CVE Modified | CISA-ADP |
| Sep 20, 2026 | New CVE Received | [email protected] |