CVE-2026-104684
Received Received - Intake

Unauthorized Gallery Metadata Exposure in Envira Gallery WordPress Plugin

Publication date: 2026-10-11

Last updated on: 2026-10-11

Assigner: WPScan

Description
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-11
Last Modified
2026-10-11
Generated
2026-10-11
AI Q&A
2026-10-11
EPSS Evaluated
N/A
NVD
CVE-2026-104684
EUVD
EUVD-2026-96742

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Envira Gallery 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Insecure Direct Object Reference (IDOR) in the Envira Gallery WordPress plugin before version 1.16.2. It allows authors to embed and expose non-public gallery metadata belonging to other users without proper authorization checks. This means private galleries can be accessed and viewed by unauthenticated visitors.

Detection Guidance

Check if your Envira Gallery plugin version is below 1.16.2. Use WordPress admin to inspect plugin versions or run: wp plugin list --name=envira-gallery --fields=name,version

Test for unauthorized access by attempting to embed a private gallery URL directly in a browser. If metadata is exposed, the vulnerability may exist.

Impact Analysis

If you use the Envira Gallery plugin before version 1.16.2, authors on your WordPress site could unintentionally expose private gallery metadata to the public. This could lead to unauthorized access to sensitive or confidential information stored in those galleries.

Compliance Impact

This vulnerability could potentially violate compliance with GDPR or HIPAA if non-public gallery metadata contains personally identifiable information (PII) or protected health information (PHI). Unauthorized exposure of such data may lead to legal and regulatory penalties.

Mitigation Strategies

Update the Envira Gallery plugin to version 1.16.2 or later immediately to patch the IDOR vulnerability.

Review all galleries for unauthorized exposure and restrict access to private galleries until confirmed secure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104684. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart