CVE-2023-6742

🗓️ 11 Jan 2024 08:32:32Reported by WordfenceType

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'envira_gallery_insert_images' function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated attackers, with contributor access and above, to modify galleries on other users' posts

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-6742	25 Jan 202414:11	–	circl
CNNVD	WordPress Plugin Gallery Plugin for WordPress Security Vulnerability	11 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-6742 Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images	11 Jan 202408:32	–	cvelist
EUVD	EUVD-2023-58955	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6742	11 Jan 202409:15	–	nvd
OSV	CVE-2023-6742	11 Jan 202409:15	–	osv
Patchstack	WordPress Envira Photo Gallery Plugin <= 1.8.7.2 is vulnerable to Broken Access Control	8 Jan 202400:00	–	patchstack
Prion	Input validation	11 Jan 202409:15	–	prion
Positive Technologies	PT-2024-15072 · WordPress · Envira Photo Gallery	11 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-6742	23 May 202502:05	–	redhatcve

NVD

Vulners

Node

enviragallery envira_galleryRange≤1.8.7.1litewordpress

[
  {
    "vendor": "smub",
    "product": "Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.8.7.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/40655278-6915-4a76-ac2d-bb161d3cee92
plugins	www.plugins.trac.wordpress.org/changeset/3017115/envira-gallery-lite/tags/1.8.7.3/includes/admin/ajax.php
plugins	www.plugins.trac.wordpress.org/browser/envira-gallery-lite/trunk/includes/admin/ajax.php

08 Apr 2026 18:18Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3

EPSS0.00127

SSVC