CVE-2026-81653

The NextGEN Gallery WordPress plugin ("The Photo Gallery, Sliders, Proofing and" plugin) before 4.5.0 contains an Insecure Direct Object Reference (IDOR) flaw. The plugin fails to verify that a user acting on an image actually owns the gallery it belongs to. As a result, any authenticated user gr...