CVE-2026-81654

NextGEN Gallery (the Photo Gallery, Sliders, Proofing WordPress plugin) before 4.5.0 lacks a capability check when saving image sizing settings . An attacker with only the plugin's gallery-management capability can modify settings that apply across the entire site , escalating beyond their intend...