CyberRota Analysis
AI-GeneratedThe Envira Gallery WordPress plugin prior to version 1.16.2 is vulnerable due to improper authorization checks in its gallery-conversion feature, allowing users with contributor-level access to create and publish gallery posts that should be restricted. This flaw can lead to unauthorized content creation, potentially compromising the integrity of the site. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.