Unknown Envira Gallery

• CVE-2026-104684 Low 2.7 Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode 0.2%
• CVE-2026-104682 Low 2.7 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route 0.2%
• CVE-2026-104681 Low 2.7 Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field 0.2%
• CVE-2026-104680 High 7.2 Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard 0.3%
• CVE-2026-104653 Medium 6.8 Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions 0.2%
• CVE-2026-104652 Medium 6.8 Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Image ID 0.2%