CVE-2025-14003

Name of the Vulnerable Software and Affected Versions Image Gallery – Photo Grid & Video Gallery plugin for WordPress versions up to and including 2.13.3

Description The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the add images to gallery callback() function allows authenticated attackers with Author-level access or higher to add images to Modula galleries belonging to other users.

Recommendations Update to version 2.13.4 or later. As a temporary workaround, restrict access to the add images to gallery callback() function until a patch is available.