Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.7
CVE-2026-104684: Envira Gallery plugin can expose private galleries
CVE-2026-104684 · published 7 days ago
Summary
The Envira Gallery add‑on for WordPress does not check whether a visitor is allowed to see a gallery before showing it. As a result, an author can unknowingly make a non‑public gallery’s details visible to anyone on the web. Update the plugin to version 1.16.2 or later to stop this issue.
What to do
- Update unknown envira gallery to version 1.16.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| unknown | envira gallery | < 1.16.2 |
Original advisory text
Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
2.7
Low
Type
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published11 Oct 2026
Updated15 Oct 2026
First seen11 Oct 2026
Track software like this
Free during beta