CVE-2026-81652

Name of the Vulnerable Software and Affected Versions Photo Gallery, Sliders, Proofing and WordPress plugin versions prior to 4.5.0

Description Insufficient verification of user entitlements allows users with the Contributor role and above to access stored metadata of any image on the site, including those in galleries belonging to other users. The exposed information includes the EXIF subset (Exchangeable Image File Format, a standard for storing metadata in image files), which contains the camera make, model, and capture timestamp, as well as internal checksums and identifiers normally reserved for administrators.

Recommendations Update the plugin to version 4.5.0 or later.