CVE-2026-81654

The NextGEN Gallery WordPress plugin (versions before 4.5.0 ) contains a missing capability check when saving image sizing settings. A user granted only the plugin's gallery-management capability by an administrator can modify settings that apply site-wide , without holding the required options c...