CVE-2026-104681 — Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field

CVE-2026-104681

Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field PUBLISHED

Description (CNA)

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery (Author and above by default) to disclose the title and excerpt of other users' private, draft, pending and trashed posts that WordPress would otherwise withhold from them.

Affected (CNA)

Vendor / product	Versions
Unknown / Envira Gallery	affected 0 before 1.16.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/bc899a2c-4b79-42a3-a313-a9fa2c3709c7/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.