CVE-2026-104652

The Envira Gallery WordPress plugin (versions before 1.16.1 ) is vulnerable to a Stored XSS flaw. The root cause is the failure to properly sanitise and escape a gallery item identifier before it is output in an image tag attribute . This allows users with Author roles or higher to inject arbitra...