CVE-2026-3423

Deferred Deferred - Pending Action

Stored XSS in Envira Gallery WordPress Plugin

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: Wordfence

Description

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a page displaying the gallery with a description enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-28

Generated

2026-08-29

AI Q&A

2026-08-29

EPSS Evaluated

N/A

NVD

CVE-2026-3423

EUVD

EUVD-2026-67708

Affected Vendors & Products

Vendor	Product	Version / Range
envira_gallery	envira_gallery	to 1.12.4 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the Envira Gallery WordPress plugin. It allows authenticated attackers with Author-level access or higher to inject malicious scripts into the gallery description field. The issue arises from insufficient input sanitization and output escaping in versions up to 1.12.4.

Detection Guidance

Check WordPress installations for the Envira Gallery plugin versions up to 1.12.4. Inspect gallery descriptions for unusual scripts or payloads. Use WordPress admin access logs to identify unauthorized changes by Author-level users or above.

Impact Analysis

An attacker could exploit this to inject scripts that execute when users view a page with the affected gallery. This could lead to theft of user sessions, defacement of the website, or delivery of malware to visitors. The impact depends on the attacker's goals and the site's user base.

Compliance Impact

This vulnerability could lead to unauthorized access to user data, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations could face fines or penalties if user data is compromised due to this flaw.

Mitigation Strategies

Update the Envira Gallery plugin to the latest version beyond 1.12.4. Remove or sanitize any suspicious gallery descriptions containing scripts. Restrict Author-level user permissions to minimize attack surface.

Hi! I’m here to help you understand CVE-2026-3423. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70