CVE-2026-24939 — WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability

CVE-2026-24939

WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through <= 2.13.6.

Affected (CNA)

Vendor / product	Versions
WP Chill / Modula Image Gallery	affected 0 through 2.13.6

CWE

CWE-862

References

https://patchstack.com/database/Wordpress/Plugin/modula-best-grid-gallery/vulnerability/wordpress-modula-image-gallery-plugin-2-13-6-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.