PT-2026-49646 · WordPress · Envira Photo Gallery

CVE-2026-54190

·

Published

2026-06-16

·

Updated

2026-06-16

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Envira Photo Gallery versions prior to 1.12.6
Description Unauthenticated Broken Access Control allows an attacker to bypass authorization restrictions without providing valid credentials.
Recommendations Update to a version later than 1.12.5.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-54190

Affected Products

Envira Photo Gallery