CVE-2026-76010

The NextGEN Gallery plugin for WordPress (versions up to and including 4.4.1 ) is vulnerable to Remote Code Execution (RCE) via the render_image function. The root cause is a combination of unrestricted mass assignment of caller-supplied meta_data keys onto the image model, missing realpath conta...