OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-81654

LOW · CVSS 3.1 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-20 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The Photo Gallery, Sliders, Proofing plugin for WordPress prior to version 4.5.0 is vulnerable due to insufficient access controls, allowing users with only gallery-management permissions to modify global image sizing settings. This could lead to unauthorized changes affecting the entire site, potentially disrupting the visual presentation and layout. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-81654
Severity
LOW
CVSS
3.1
EPSS
0.21%
WordPress

Original NVD Description

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its gallery-management capability by an administrator to change settings that apply across the whole site.