CVE-2025-12377

CVE-2025-12377 affects the Gallery Plugin for WordPress – Envira Photo Gallery (

CVE-2025-12377: Missing Authorization

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-leve...