CVE-2026-104681
Last modified
CVE-2026-104681 is a low-severity vulnerability rated 2.7/10 on the CVSS scale. The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery (Author and above by default) to disclose the title and excerpt of other users' private, draft, pending and trashed posts that WordPress would otherwise withhold from them.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery (Author and above by default) to disclose the title and excerpt of other users' private, draft, pending and trashed posts that WordPress would otherwise withhold from them.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Envira Gallery | < 1.16.2 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-104681?
How severe is CVE-2026-104681?
How do I fix CVE-2026-104681?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-104672Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17…7.1
- CVE-2026-104673Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2026-104675Missing Authorization vulnerability in Liquid Web / StellarW…4.3
- CVE-2026-104677The WP Coder WordPress plugin before 4.5.2 does not restric…7.2
- CVE-2026-104678The CP Media Player WordPress plugin before 1.3.4 does not …2.7
- CVE-2026-104680The Envira Gallery WordPress plugin before 1.16.2 does not …7.2
- CVE-2026-104682The Envira Gallery WordPress plugin before 1.16.2 does not …2.7
- CVE-2026-104684The Envira Gallery WordPress plugin before 1.16.2 does not …2.7
- CVE-2026-1047The salavat counter Plugin plugin for WordPress is vulnerabl…4.4
- CVE-2026-104703Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-104704Progressive Robot hMailServer 6.0.0 through 6.3.5 does not e…7.4
- CVE-2026-104706DigitalCanion has discovered a path traversal vulnerability …8.4
Are you affected by CVE-2026-104681?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST