CVE-2026-104684
Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors.
| Vendor | unknown |
| Product | envira gallery |
| Published | Oct 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown envira gallery
Be the first to know when new unknown vulnerabilities affecting unknown envira gallery are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Envira Gallery
0 < 1.16.2
References
Credits
Muni Nitish Kumar Yaddala WPScan