Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

Уязвимости

• CVE-2024-43925нужен вход≤ 1.8.14

  WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2026-54190без авторизации≤ 1.12.5

  WordPress Envira Photo Gallery plugin <= 1.12.5 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-3423автор+≤ 1.12.4

  Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description

  Средний 6.4

• CVE-2026-5361автор+≤ 1.12.4

  Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'arrows' Parameter

  Средний 6.4

• CVE-2026-1236автор+≤ 1.12.3

  Envira Gallery for WordPress <= 1.12.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API

  Средний 6.4

• CVE-2020-9334нужен вход

  A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress.

  Средний 5.4

• CVE-2024-37095нужен вход≤ 1.8.7.3

  WordPress Envira Photo Gallery plugin <= 1.8.7.3 - CSRF leading to notice dismissal vulnerability

  Средний 4.3

• CVE-2025-12377автор+≤ 1.12.0

  Gallery Plugin for WordPress – Envira Photo Gallery <= 1.12.0 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions

  Средний 4.3

• CVE-2025-11448участник+≤ 1.11.0

  Gallery Plugin for WordPress – Envira Photo Gallery <= 1.11.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion

  Средний 4.3

• CVE-2023-6742участник+≤ 1.8.7.2

  Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images

  Средний 4.3