CVE-2026-104682

2.7 Faible

Publiée le 11/10/2026 à 09:17 · Modifiée le 13/10/2026 à 22:36 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.

Traduire en français

Produits concernés

Unknown Envira Gallery

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.7 Faible	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/faaa0c75-64d7-4e92-99a6-e60805d2080b/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories