Skip to content
Sign in
7.1 High

CVE-2025-49394 Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album

Description

Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through <= 1.0.7.

Affected products and versions

Product Affected versions Fixed in
Image Gallery block – Create and display photo gallery/photo album. 1.0 earliest → 1.0.7 No fix stated

Other CVEs of Image Gallery block – Create and display photo gallery/photo album.

The 2 CVEs of Image Gallery block – Create and display photo gallery/photo album. →
CVE-2026-115613 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image… 6.5 Medium
Track this CVE