4.3 Moyenne

CVE-2025-12377 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized…

Description

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-level access and above, to perform multiple actions, such as removing images from arbitrary galleries. The vulnerability was partially patched in version 1.12.0.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Gallery Plugin for WordPress – Envira Photo Gallery 1.12	premières → 1.12.0	Pas de correctif indiqué
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More 1.12	premières → 1.12.0	Pas de correctif indiqué

Références

www.wordfence.com www.wordfence.com
drive.google.com drive.google.com
plugins.trac.wordpress.org plugins.trac.wordpress.org
research.cleantalk.org research.cleantalk.org
plugins.trac.wordpress.org plugins.trac.wordpress.org
plugins.trac.wordpress.org plugins.trac.wordpress.org

Chronologie

Publiée 13 novembre 2025
Dernière modification 8 avril 2026

Les 4 CVE de Gallery Plugin for WordPress – Envira Photo Gallery →

CVE-2025-11448 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Moyenne CVE-2024-5020 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox… 6.4 Moyenne CVE-2023-6742 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Moyenne

Suivre cette CVE