Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-81654

NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update

Description

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its gallery-management capability by an administrator to change settings that apply across the whole site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Photo Gallery, Sliders, Proofing and Themes

Default version status: unaffected

  • 0 to < 4.5.0affected

References