3.1
Low
CVE-2026-81654 The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options…
Description
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its gallery-management capability by an administrator to change settings that apply across the whole site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Photo Gallery, Sliders, Proofing and Themes 4.5 | earliest → < 4.5.0 | 4.5.0 |
Other CVEs of Photo Gallery, Sliders, Proofing and Themes
The 8 CVEs of Photo Gallery, Sliders, Proofing and Themes →
CVE-2026-81653
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an…
4.2
Medium
CVE-2026-81652
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is…
2.7
Low
CVE-2026-81651
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a…
3.1
Low
CVE-2026-81650
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of…
7.2
High