CVE-2025-12377
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
The Envira Photo Gallery plugin for WordPress up to version 1.12.0 is vulnerable to unauthorized data modification due to missing capability checks in several functions. Authenticated attackers with Author-level access or above can perform multiple actions, such as removing images from arbitrary galleries. The vulnerability was partially patched in version 1.12.0.
Risk Assessment
The risk is the possibility of unauthorized modification of gallery content by users with elevated privileges, which could lead to data corruption or loss of site integrity.
Recommendation
It is recommended to immediately update the plugin to the latest version that fully fixes the vulnerability and to restrict user privileges to the minimum necessary.
Other vulnerabilities in Envira Photo Gallery
See all- CVE-2026-54190Medium
Versions of Envira Photo Gallery up to 1.12.5 have an unauthenticated broken access control vulnerability that may allow attackers to access resources they should not have access to.
- CVE-2025-11448Medium
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/envira-convert/v1/bulk-convert' REST API endpoint in all versions up to, and including, 1.11.0. This makes it possible for authenticated attackers, with contributor-level access and above, to convert galleries to Envira galleries.
Original NVD description (English source)
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Author-level access and above, to perform multiple actions, such as removing images from arbitrary galleries. The vulnerability was partially patched in version 1.12.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS