CVE-2026-104682

The Envira Gallery WordPress plugin (versions prior to 1.16.2 ) is vulnerable to a missing authorization flaw in its gallery-conversion feature. The root cause is that the plugin fails to properly verify if a requester is authorized to create specific gallery content, instead only checking if the...