CVE-2026-81654

LowCVSS 3.1/10Last modified Sep 21, 2026

Description

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its gallery-management capability by an administrator to change settings that apply across the whole site.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Sep 20, 2026
Last modified: Sep 21, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-816557.5The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by ever CVE-2026-816568.8IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the New Query Builder REST Processor. A low-privileged a CVE-2026-816579.8IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deseriali CVE-2026-816586.5A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template CVE-2026-816597.1Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that CVE-2026-81665.4Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc. CVE-2026-816608.8The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does not validate or escape values submitted to s CVE-2026-816628.6Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration valu CVE-2026-816645.3The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each administrative /system/*CVE-2026-816657.5A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast CVE-2026-816666.5An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can CVE-2026-816685.4A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filte