CVE-2026-81653

NextGEN Gallery (Photo Gallery, Sliders, Proofing and) WordPress plugin versions before 4.5.0 contain an Insecure Direct Object Reference (IDOR) flaw: the plugin does not verify that the user acting on an image actually owns the gallery it belongs to. Any user granted the plugin's gallery-managem...