CVE-2026-42680

CriticalCVSS 9.8

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

The Contest Gallery Pro WordPress plugin contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions from n/a through 29.0.1.

Risk Assessment

An attacker can gain elevated privileges in the system, potentially leading to control over the gallery and user data.

Recommendation

Update the Contest Gallery Pro plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro: from n/a through 29.0.1.