CVE-2026-104680
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress p…
Impact
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.
Affected products
| Product | Affected versions |
|---|---|
| Envira Gallery WordPress Plugin | before 1.16.2 |
| Into The Network-Shared Envira Gallery WordPress Plugin | before 1.16.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.