Log in Start free

Vulnerability · Published Nov 15, 2025 · Assigned by Wordfence

CVE-2025-12849Contest Gallery <= 28.0.2 - Missing Authorization

Medium 5.3

In plain English

A medium-severity missing authorization in Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe from contest-gallery. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 72.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification. This makes it possible for unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the `cg_check_wp_admin_upload_v10` action. It does not enable an attacker to move or upload files.

Affected products (as reported)

VendorProductVersions
contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe 0 – through 28.0.2

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References