CVE-2026-104653
Received Received - Intake

Stored XSS in Envira Gallery WordPress Plugin

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: WPScan

Description
The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display configuration values before storing them and outputting them in an image tag attribute, allowing users with the Author role and above to inject arbitrary web scripts that execute when any visitor, including an administrator, views a page containing the affected gallery.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-104653
EUVD
EUVD-2026-94180

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Envira Gallery 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in the Envira Gallery WordPress plugin before version 1.16.1. Users with the Author role or higher can inject malicious scripts into gallery display settings. These scripts are stored and executed when any visitor, including administrators, views a page with the affected gallery.

Detection Guidance

Check if the Envira Gallery plugin version is below 1.16.1. Log in to WordPress admin, go to Plugins, and verify the installed version. If vulnerable, update immediately.

Impact Analysis

Attackers could steal sensitive user data like cookies or session tokens, redirect users to malicious sites, or perform actions on their behalf. Administrators viewing compromised galleries risk full account compromise, leading to potential site takeover or further attacks.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face fines, legal action, and reputational damage due to non-compliance resulting from unauthorized data access or modification.

Mitigation Strategies

Update the Envira Gallery plugin to version 1.16.1 or later. If updating is not possible, consider disabling the plugin until a patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104653. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart