| CVE-2026-104680 |
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves…
|
7.2
High
|
Oct 11, 2026 |
| CVE-2026-104681 |
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to…
|
2.7
Low
|
Oct 11, 2026 |
| CVE-2026-104682 |
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion…
|
2.7
Low
|
Oct 11, 2026 |
| CVE-2026-104684 |
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before…
|
2.7
Low
|
Oct 11, 2026 |
| CVE-2026-104652 |
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery item identifier before…
|
6.8
Medium
|
Oct 7, 2026 |
| CVE-2026-104653 |
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display…
|
6.8
Medium
|
Oct 7, 2026 |