CVE-2026-104682
Received Received - Intake

Authorization Bypass in Envira Gallery WordPress Plugin

Publication date: 2026-10-11

Last updated on: 2026-10-11

Assigner: WPScan

Description
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-11
Last Modified
2026-10-11
Generated
2026-10-11
AI Q&A
2026-10-11
EPSS Evaluated
N/A
NVD
CVE-2026-104682
EUVD
EUVD-2026-96741

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Envira Gallery 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Envira Gallery WordPress plugin before version 1.16.2 has a flaw in its authorization check for the gallery-conversion feature. Instead of verifying if a user can create the plugin's own gallery content, it only checks if they can edit any arbitrary post they name. This allows contributors, who normally have limited permissions, to create and publish gallery posts that should be restricted by the plugin's settings.

Detection Guidance

Check the installed version of the Envira Gallery plugin in WordPress. If it is below 1.16.2, the system is vulnerable. Use the WordPress admin panel or run a command like 'wp plugin list' in the WordPress directory to verify the version.

Impact Analysis

If you use the Envira Gallery plugin before version 1.16.2, contributors on your WordPress site could create and publish gallery posts that bypass the plugin's intended restrictions. This could lead to unauthorized content being published or settings being misconfigured, potentially affecting the appearance or functionality of your site.

Compliance Impact

This vulnerability allows contributors to bypass authorization checks and publish restricted gallery posts, which could lead to unauthorized data exposure. This may violate compliance requirements under GDPR or HIPAA if sensitive media is involved, as it enables unauthorized users to publish content that should be restricted.

Mitigation Strategies

Update the Envira Gallery plugin to version 1.16.2 or later immediately. This can be done through the WordPress admin panel under 'Plugins' or by using a command like 'wp plugin update envira-gallery' if using WP-CLI.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104682. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart