WordPress Plugin Vulnerabilities

NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR

Description

The plugin does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management capability by an administrator to overwrite the stored settings of any gallery on the site, including its filesystem path, and including galleries belonging to other users.

Proof of Concept

Affects Plugins

Plugin icon
nextgen-gallery
Fixed in 4.5.0

References

CVE
CVE-2026-81651

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
3.1 (low)

Miscellaneous

Original Researcher
Murad Akhmedov
Submitter
Murad Akhmedov
Submitter website
https://www.linkedin.com/in/murad-akhmedov-2b9887367/
Verified
Yes
WPVDB ID
69ccebff-414d-49bb-b914-cae87ab27f4f

Timeline

Publicly Published
2026-09-18 (about 2 days ago)
Added
2026-09-18 (about 1 day ago)
Last Updated
2026-09-18 (about 1 day ago)

Other

Published
Title
Published
2023-09-12
Title
wpDiscuz < 7.6.4 - Post Rating Increase/Decrease iva IDOR
Published
2024-05-24
Title
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
Published
2024-01-17
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.37 - Insecure Direct Object Reference
Published
2026-09-03
Title
Business Directory Plugin – Easy Listing & Member Directories for WordPress < 6.4.27 - Unauthenticated Insecure Direct Object Reference
Published
2022-08-04
Title
Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR