Vulnerability · Published Sep 20, 2026 · Assigned by WPScan

CVE-2026-81652NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR

Low 2.7

In plain English

A low-severity authorization bypass via user-controlled key in Photo Gallery, Sliders, Proofing and Themes from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)2.7Low

Exploit odds (30 days)0.3%top 77.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor role and above to read the stored metadata of any image on the site, including images in galleries belonging to other users. The disclosed data includes the image's stored EXIF subset, covering camera make and model and capture timestamp, along with internal checksums and identifiers that the Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0's own capability-gated read path reserves to administrators.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Photo Gallery, Sliders, Proofing and Themes	3.59.5 – before 4.5.0

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References

https://wpscan.com/vulnerability/58759289-adca-47d5-8c15-c073c9f14c31/ exploit, vdb-entry, technical-description