CVE-2026-81651
Deferred Deferred - Pending Action

Photo Gallery Plugin Path Overwrite Vulnerability

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: WPScan

Description
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management capability by an administrator to overwrite the stored settings of any gallery on the site, including its filesystem path, and including galleries belonging to other users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-10-10
AI Q&A
2026-09-20
EPSS Evaluated
2026-10-09
NVD
CVE-2026-81651
EUVD
EUVD-2026-83663

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
photo_gallery sliders_proofing to 4.5.0 (exc)
imagely nextgen_gallery to 4.5.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Insecure Direct Object Reference (IDOR) vulnerability in the NextGEN Gallery WordPress plugin before version 4.5.0. It allows authenticated users with gallery-management capabilities to modify settings of any gallery on the site, including those owned by others. The flaw occurs because the plugin does not verify if the user saving a gallery owns it.

Detection Guidance

Check the installed version of the NextGEN Gallery plugin. If it is below 4.5.0, the system is vulnerable. Use WordPress admin panel or run a command like 'wp plugin list' in the WordPress directory to verify the version.

Impact Analysis

An attacker with gallery-management access could overwrite gallery settings, including changing the filesystem path. This could lead to unauthorized access to or deletion of gallery files, data corruption, or potential further attacks on the WordPress site.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data stored in galleries, potentially violating GDPR (data protection) or HIPAA (health data privacy) requirements. Unauthorized changes to filesystem paths may also compromise data integrity.

Mitigation Strategies

Update the NextGEN Gallery plugin to version 4.5.0 or later immediately. Remove or restrict gallery-management capabilities from untrusted users until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81651. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart