Skip to content
Sign in
6.4 Medium

CVE-2026-3423 The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description'…

Description

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a page displaying the gallery with a description enabled.

Affected products and versions

Product Affected versions Fixed in
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 1.12 earliest → 1.12.4 No fix stated

Other CVEs of Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

The 7 CVEs of Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More →
CVE-2026-5361 The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions… 6.4 Medium CVE-2026-1236 The Envira Gallery for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium CVE-2025-12377 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Medium CVE-2025-11448 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Medium
Track this CVE