4.3
Medium
CVE-2023-6742 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
Description
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'envira_gallery_insert_images' function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated attackers, with contributor access and above, to modify galleries on other users' posts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gallery Plugin for WordPress – Envira Photo Gallery 1.8 | earliest → 1.8.7.2 | No fix stated |
| Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 1.8 | earliest → 1.8.7.2 | No fix stated |
References
- www.wordfence.com www.wordfence.com
- plugins.trac.wordpress.org plugins.trac.wordpress.org
- plugins.trac.wordpress.org plugins.trac.wordpress.org
Timeline
- Published
- Last modified
Other CVEs of Gallery Plugin for WordPress – Envira Photo Gallery
The 4 CVEs of Gallery Plugin for WordPress – Envira Photo Gallery →
CVE-2025-12377
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
4.3
Medium
CVE-2025-11448
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…
4.3
Medium
CVE-2024-5020
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
6.4
Medium